YI
Vendor
YugabyteDB Inc
6
CVEs
0
On KEV
0
New 30D
Products
YU7.0
YugabyteDB
YugabyteDB Inc
3 CVEs0 on KEV0 new
YA6.8
YugabyteDB Anywhere
YugabyteDB Inc
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1966 | YA YugabyteDB Anywhere YugabyteDB Inc | 2.4 | Feb 5 | YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI |
| CVE-2025-8866 | YA YugabyteDB Anywhere YugabyteDB Inc | 5.1 | Aug 11 | YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint |
| CVE-2025-8865 | YU YugabyteDB YugabyteDB Inc | 4.1 | Aug 11 | The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs |
| CVE-2025-8864 | YA YugabyteDB Anywhere YugabyteDB Inc | 6.8 | Aug 11 | Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logs |
| CVE-2025-8863 | YU YugabyteDB YugabyteDB Inc | 7.0 | Aug 11 | YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission |
| CVE-2025-8862 | YU YugabyteDB YugabyteDB Inc | 7.0 | Aug 11 | YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations |