Mehrere Schwachstellen (CVE-2026-75832, CVE-2026-75835, CVE-2026-75837, CVE-2026-75843, CVE-2026-75851, CVE-2026-75852, CVE-2026-75854) in Arcadedb
⚠️ CVE-Referenzen:
CVE-2026-75832
CVE-2026-75835
CVE-2026-75837
CVE-2026-75843
CVE-2026-75851
CVE-2026-75852
CVE-2026-75854
Arcadedata - Arcadedb - CRITICAL - CVE-2026-75854.
The Redis wire-protocol plugin in ArcadeDB prior to version 26.8.1 is susceptible to a missing authentication vulnerability. This flaw enables unauthenticated attackers to gain unauthorized access to the server by connecting to the Redis port. Once connected, attackers can execute arbitrary commands, allowing them to read, write, and even delete sensitive data across any database on the server without needing any credentials, effectively bypassing all existing security measures.
Quelle: securityvulnerability.io