Vulnerabilities in ArcadeData

35 results
Vexday analysis

ArcadeData apresenta exposição mínima com apenas 1 vulnerabilidade crítica registrada, sem indícios de exploração ativa em ambientes. A falha de autorização (CWE-863) foi divulgada recentemente e demanda atenção imediata na avaliação de controles de acesso, embora o reduzido volume de CVEs sugira superfície de ataque limitada ou baixa visibilidade pública do produto.

CVE-2026-67340HIGHArcadeDB before 26.7.2 Remote Code Execution via Trigger ScriptsEPSS 0.9%CVE-2026-75854CRITICALArcadeDB Redis Wire-Protocol Plugin Missing AuthenticationEPSS 0.9%CVE-2026-76224HIGHArcadeDB before 26.8.1 Remote Code Execution via Groovy FallbackEPSS 0.9%CVE-2026-75852CRITICALArcadeDB MongoDB wire protocol authentication bypass cross-databaseEPSS 0.7%CVE-2026-93598HIGHArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundleEPSS 0.6%CVE-2026-65831HIGHArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file readEPSS 0.6%CVE-2026-75853HIGHArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-DatabaseEPSS 0.6%CVE-2026-75855HIGHArcadeDB before 26.8.1 Path Traversal via create/drop databaseEPSS 0.5%CVE-2026-67341CRITICALArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTIONEPSS 0.5%CVE-2026-67342CRITICALArcadeDB before 26.7.2 Authorization Bypass via Database HandlersEPSS 0.5%CVE-2026-67343HIGHArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/serverEPSS 0.5%CVE-2026-54076HIGHArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)EPSS 0.5%CVE-2026-75842HIGHArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSVEPSS 0.5%CVE-2026-54077HIGHArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated usersEPSS 0.4%CVE-2026-67356HIGHArcadeDB before 26.7.3 Privilege Escalation via JavaScript TriggerEPSS 0.4%CVE-2026-75843CRITICALArcadeDB before 26.8.1 Privilege Escalation via gRPC TransactionEPSS 0.4%CVE-2026-75851CRITICALArcadeDB before 26.8.1 Authentication Bypass via Async CommandEPSS 0.4%CVE-2026-93594HIGHArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeriesEPSS 0.4%CVE-2026-75840HIGHArcadeDB before 26.8.1 Arbitrary File Read via Unescaped RegexEPSS 0.4%CVE-2026-44221CRITICALArcadeDB: Cross-database authorization bypass and unsecured newly-created databasesEPSS 0.4%