AI
Product
Apache IoTDB
17
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 7High 6Medium 1Low 0
Watch
Add Apache IoTDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40008 | 9.8 | Jul 10 | Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPC Affected: 1.0.0 before 2.0.10 |
| CVE-2026-28564 | 9.8 | Jul 10 | Apache IoTDB: REST Basic Authentication Accepts Stale Cached Credentials Affected: 1.0.0 before 2.0.10 |
| CVE-2026-24014 | 9.8 | Jul 6 | Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write Affected: 1.3.3 before 2.0.8 |
| CVE-2026-40005 | 9.1 | Jul 10 | Apache IoTDB: Path Traversal in Pipe File Transfer Receiver Affected: 1.0.0 before 2.0.10 |
| CVE-2026-24013 | 9.1 | Jul 6 | Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPC Affected: 1.3.3 before 2.0.8 |
| CVE-2025-64152 | 9.1 | Jun 26 | Apache IoTDB: Path Traversal Vulnerability Affected: 1.0.0 before 1.3.6; 2.0.0 before 2.0.7 |
| CVE-2025-55017 | 9.1 | Jun 26 | Apache IoTDB: Path Traversal Vulnerability Affected: 2.0.0 before 2.0.6; 1.0.0 before 1.3.6 |
Showing 7