Login Request a demo
AI
Product
Apache IoTDB
by Apache Software Foundation · last CVE Oct 21, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 7High 6Medium 1Low 0
Severity
All severities17Critical7High6Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache IoTDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44630
7.5
1%
Aug 10
Apache IoTDB: RPC service denial of service via unchecked Thrift string length
Affected: before 1.3.8; 2.0.0 before 2.0.10
CVE-2026-40452
7.5
0%
Jul 10
Apache IoTDB: Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users
Affected: 1.3.5 before 1.3.8; 2.0.5 before 2.0.10
CVE-2026-40007
7.5
0%
Jul 10
Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError
Affected: 1.0.0 before 2.0.10
CVE-2026-40006
7.5
1%
Jul 10
Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver
Affected: 1.0.0 before 2.0.10
CVE-2026-24012
7.5
1%
Jul 6
Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query
Affected: 1.3.3 before 2.0.8
CVE-2022-43766
7.5
2%
Oct 26
Apache IoTDB prior to 0.13.3 allows DoS
Affected: through 0.13.2; 0.12.2 before unspecified
Showing 6