Arcadedata
34 CVEs tracked since 2026. Since Aug 2026, none of them reached CISA KEV.
Arcadedata CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-08 | 25 | 0 |
| 2026-09 | 9 | 0 |
| 2026-10 | 11 or fewer | |
| 2026-11 | 0 |
Products
The products that kept showing up in Arcadedata's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Arcadedata.
- CVE-2026-119577ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections6.8
- CVE-2026-119576ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint4.3
- CVE-2026-119575ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List6.5
- CVE-2026-114059ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization7.5
- CVE-2026-114058ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol4.3
- CVE-2026-114057ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure4.3
- CVE-2026-114056ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH4.3
- CVE-2026-93598ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle—
- CVE-2026-93597ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses7.7
- CVE-2026-93596ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connect4.3
- CVE-2026-93595ArcadeDB before 26.9.1 ACL Bypass via query_database Tool6.5
- CVE-2026-93594ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries8.1
- CVE-2026-93593ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission8.1
- CVE-2026-65831ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read7.7
- CVE-2026-54077ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users7.1
The record
- Peak rank
- #55 in Aug 2026
- Busiest month shown
- Aug 2026, 25 CVEs
- Months with a KEV entry
- 0 since Aug 2026
- Monthly snapshots
- 2 since 2026