Vulnerabilidades em ArcadeData

26 resultados
Análise Vexday

ArcadeData apresenta exposição mínima com apenas 1 vulnerabilidade crítica registrada, sem indícios de exploração ativa em ambientes. A falha de autorização (CWE-863) foi divulgada recentemente e demanda atenção imediata na avaliação de controles de acesso, embora o reduzido volume de CVEs sugira superfície de ataque limitada ou baixa visibilidade pública do produto.

CVE-2026-75854CRITICALArcadeDB Redis Wire-Protocol Plugin Missing AuthenticationEPSS 1.1%CVE-2026-67340HIGHArcadeDB before 26.7.2 Remote Code Execution via Trigger ScriptsEPSS 0.6%CVE-2026-76224HIGHArcadeDB before 26.8.1 Remote Code Execution via Groovy FallbackEPSS 0.6%CVE-2026-75852CRITICALArcadeDB MongoDB wire protocol authentication bypass cross-databaseEPSS 0.5%CVE-2026-44221CRITICALArcadeDB: Cross-database authorization bypass and unsecured newly-created databasesEPSS 0.4%CVE-2026-75853HIGHArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-DatabaseEPSS 0.4%CVE-2026-75855HIGHArcadeDB before 26.8.1 Path Traversal via create/drop databaseEPSS 0.4%CVE-2026-75842HIGHArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSVEPSS 0.3%CVE-2026-67341CRITICALArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTIONEPSS 0.3%CVE-2026-67342CRITICALArcadeDB before 26.7.2 Authorization Bypass via Database HandlersEPSS 0.3%CVE-2026-75851CRITICALArcadeDB before 26.8.1 Authentication Bypass via Async CommandEPSS 0.3%CVE-2026-75840HIGHArcadeDB before 26.8.1 Arbitrary File Read via Unescaped RegexEPSS 0.3%CVE-2026-75843CRITICALArcadeDB before 26.8.1 Privilege Escalation via gRPC TransactionEPSS 0.3%CVE-2026-67343HIGHArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/serverEPSS 0.3%CVE-2026-75841MEDIUMArcadeDB before 26.8.1 Denial of Service via range()EPSS 0.3%CVE-2026-76225HIGHArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVEPSS 0.3%CVE-2026-67357HIGHArcadeDB before 26.7.3 Information Disclosure via get_server_settingsEPSS 0.3%CVE-2026-76223HIGHArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTIONEPSS 0.2%CVE-2026-75846HIGHArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTIONEPSS 0.2%CVE-2026-67356HIGHArcadeDB before 26.7.3 Privilege Escalation via JavaScript TriggerEPSS 0.2%