Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: ArcadeData arcadedb 26.10.1 Clear all filters
TI-2026-78672 CVE-2026-114059

Missing authorization in ArcadeDB Gremlin Groovy engine allows code execution

Priority HIGH 69

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command() lacks scripting…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00643 Published 2026-10-21 Fixed in 26.10.1 CWE-863
TI-2026-78670 CVE-2026-114057

ArcadeDB Bolt SHOW DATABASES Information Disclosure

Priority MEDIUM 57

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00294 Published 2026-10-21 Fixed in 26.10.1 CWE-862
TI-2026-78669 CVE-2026-114056

Authorization bypass in ArcadeDB lets read-only users alter edge types

Priority MEDIUM 57

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATE_SCHEMA permission.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00299 Published 2026-10-21 Fixed in 26.10.1 CWE-862