Product by Arcadedata

    Arcadedb

    39 known vulnerabilities in Arcadedb (Arcadedata), 0 of them actively exploited (CISA KEV).

    Key figures

    39

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Arcadedb (Arcadedata)
    CriticalCVE-2026-75854

    ArcadeDB Redis Wire-Protocol Plugin Missing Authentication

    		9.8
    HighCVE-2026-76224

    ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback

    		8.8
    CriticalCVE-2026-67340

    ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts

    		7.2
    CriticalCVE-2026-75852

    ArcadeDB MongoDB wire protocol authentication bypass cross-database

    		9.8
    CriticalCVE-2026-67342

    ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers

    		9.8
    CriticalCVE-2026-67341

    ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION

    		9.8
    HighCVE-2026-75853

    ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database

    		8.8
    HighCVE-2026-65831

    ArcadeData Arcadedb: Improper Privilege Management

    		7.7
    HighCVE-2026-75855

    ArcadeDB before 26.8.1 Path Traversal via create/drop database

    		8.7
    HighCVE-2026-93598

    ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle

    		—
    HighCVE-2026-54076

    ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

    		8.1
    CriticalCVE-2026-75851

    ArcadeDB before 26.8.1 Authentication Bypass via Async Command

    		9.9
    CriticalCVE-2026-75843

    ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction

    		9.9
    HighCVE-2026-67343

    ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/server

    		8.8
    HighCVE-2026-93594

    ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries

    		8.1
    HighCVE-2026-114059

    ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization

    		7.5
    HighCVE-2026-75840

    ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex

    		7.5
    HighCVE-2026-93593

    ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission

    		8.1
    HighCVE-2026-67356

    ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger

    		8.8
    HighCVE-2026-75842

    ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV

    		7.7
    HighCVE-2026-54077

    ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users

    		7.1
    HighCVE-2026-93597

    ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

    		7.7
    HighCVE-2026-76225

    ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV

    		7.7
    HighCVE-2026-67357

    ArcadeDB before 26.7.3 Information Disclosure via get_server_settings

    		7.5
    HighCVE-2026-93595

    ArcadeDB before 26.9.1 ACL Bypass via query_database Tool

    		6.5

    All vulnerabilities in search

    News

    All products by Arcadedata