CO
Vendor
com.arcadedb
3
CVEs
0
On KEV
0
New 30D
Products
AR8.1
arcadedb-engine
com.arcadedb
2 CVEs0 on KEV0 new
AR7.7
arcadedb-server
com.arcadedb
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65831 | AR arcadedb-server com.arcadedb | 7.7 | Sep 15 | ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read |
| CVE-2026-54077 | AR arcadedb-engine com.arcadedb | 7.1 | Sep 15 | ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users |
| CVE-2026-54076 | AR arcadedb-engine com.arcadedb | 8.1 | Sep 15 | ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221) |