Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: ArcadeData arcadedb 26.8.1 Clear all filters
TI-2026-53330 CVE-2026-76225 · GHSA-57m4-3m25-xp8f

ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV

Priority HIGH 69

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-08-19 Fixed in 26.8.1 CWE-918
TI-2026-53329 CVE-2026-76224 · GHSA-qf82-gwmv-gc98

ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback

Priority MEDIUM 41

ArcadeDB before 26.8.1 (arcadedb-gremlin, affected <= 26.7.3) contains a remote code execution vulnerability in its Gremlin query engine.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0085 Published 2026-08-19 Fixed in 26.8.1 CWE-94
TI-2026-53328 CVE-2026-76223 · GHSA-p32w-fr4c-xp93

ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION

Priority LOW 31

ArcadeDB (com.arcadedb) versions 26.7.3 and earlier fail to enforce the UPDATE_SCHEMA permission check when a DEFINE FUNCTION statement targets an already-existing function library.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00352 Published 2026-08-19 Fixed in 26.8.1 CWE-862