IoTDB

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 21, 2026
Last mentioned9d ago

Timeline

2 articles · newest first

Apache IoTDB legacy sendFile RPC allows unauthenticated RCE (CVE-2026-59562)

Apache rates the legacy pipe sendFile flaw important; the notice gives no versions or fix.

oss-securityOct 21, 16:07 UTC · 9d agoVulnerability 4 sourcesCVE-2026-595621

Apache IoTDB legacy pipe lets SYSTEM users act as root (CVE-2026-59229)

Versions 2.0.0 before 2.0.11 run load and delete operations with a hardcoded root identity.

oss-securityOct 21, 16:05 UTC · 9d agoVulnerability 4 sourcesCVE-2026-592291

Related CVEs

by mentions

CVE-2026-595629.8
Missing authentication for critical function vulnerability in Apache IoTDB
published 9d ago
CVE-2026-592298.8
The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations
published 9d ago

Appears with

Apachevendor · 2

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.