AI
Product
Apache IoTDB
23
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 10High 8Medium 2Low 0
Watch
Add Apache IoTDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44630 | 7.5 | Aug 10 | Apache IoTDB: RPC service denial of service via unchecked Thrift string length Affected: before 1.3.8; 2.0.0 before 2.0.10 |
| CVE-2026-40452 | 7.5 | Jul 10 | Apache IoTDB: Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users Affected: 1.3.5 before 1.3.8; 2.0.5 before 2.0.10 |
| CVE-2026-40007 | 7.5 | Jul 10 | Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError Affected: 1.0.0 before 2.0.10 |
| CVE-2026-40006 | 7.5 | Jul 10 | Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver Affected: 1.0.0 before 2.0.10 |
| CVE-2026-24012 | 7.5 | Jul 6 | Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query Affected: 1.3.3 before 2.0.8 |
| CVE-2025-48392 | 7.5 | Sep 24 | Apache IoTDB: DoS Vulnerability Affected: 1.3.3 through 1.3.4; 2.0.1-beta through 2.0.4 |
| CVE-2025-26864 | 7.5 | May 14 | Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication Affected: 0.10.0 through 1.3.3; 2.0.1-beta before 2.0.2 |
| CVE-2022-43766 | 7.5 | Oct 26 | Apache IoTDB prior to 0.13.3 allows DoS Affected: through 0.13.2; 0.12.2 before unspecified |
Showing 8