Priority MEDIUM 58
TDengine is a time-series database optimized for Internet of Things devices.
Vulnerabilities
9 records
TI-2026-44505 CVE-2026-62351
TDengine: Unauthenticated Remote Denial of Service via Out-of-Bounds Read in transDecompressMsg
Priority HIGH 72
TDengine is a time-series database optimized for Internet of Things devices.
TI-2026-44502 CVE-2026-62348
TDengine: KILL SSMIGRATE missing authorization lets low-privilege users interrupt shared-storage migrations
Priority MEDIUM 58
TDengine is a time-series database optimized for Internet of Things devices.
TI-2026-44503 CVE-2026-62349
TDengine: Off-by-One Buffer Overflow
Priority HIGH 69
TDengine is an open source, time-series database optimized for Internet of Things devices.
TI-2026-44504 CVE-2026-62350
TDengine: UDF lead to RCE
Priority HIGH 67
TDengine is an open source, time-series database optimized for Internet of Things devices.
TI-2026-44508 CVE-2026-62355
TDengine: Standard User permission unexpect
Priority LOW 24
TDengine is an open source, time-series database optimized for Internet of Things devices.
TI-2026-30822 CVE-2026-42542
TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)
Priority MEDIUM 40
TDengine is an open source, time-series database optimized for Internet of Things devices.
TI-2023-19882 CVE-2023-38502
TDengine Database Denial-of-Service
Priority MEDIUM 62
TDengine is an open source, time-series database optimized for Internet of Things devices.
TI-2023-16957 CVE-2023-34111
Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin
Priority HIGH 76
The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure us…