FA
Vendor
FalkorDB
9
CVEs
0
On KEV
7
New 30D
Products
FA9.8
FalkorDB
FalkorDB
7 CVEs0 on KEV7 new
FB9.8
FalkorDB Browser
FalkorDB
1 CVEs0 on KEV0 new
QU8.2
QueryWeaver
FalkorDB
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107911 | FA FalkorDB FalkorDB | 7.5 | Oct 9 | Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument |
| CVE-2026-107910 | FA FalkorDB FalkorDB | 8.1 | Oct 9 | Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling |
| CVE-2026-107909 | FA FalkorDB FalkorDB | 9.1 | Oct 9 | Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length |
| CVE-2026-107908 | FA FalkorDB FalkorDB | 9.8 | Oct 9 | Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message |
| CVE-2026-7826 | FA FalkorDB FalkorDB | 9.1 | Oct 9 | Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB |
| CVE-2026-7827 | FA FalkorDB FalkorDB | 8.1 | Oct 9 | Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB |
| CVE-2026-5759 | FA FalkorDB FalkorDB | 9.8 | Oct 9 | Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB |
| CVE-2026-10130 | QU QueryWeaver FalkorDB | 8.2 | Jul 18 | QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts |
| CVE-2026-6057 | FB FalkorDB Browser FalkorDB | 9.8 | Apr 10 | Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution |