Skip to content
OpenAdvisories

Vendor

ArcadeData

42 known vulnerabilities.

Products

arcadedb 42
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-75855 Public exploit

    ArcadeDB before 26.8.1 Path Traversal via create/drop database

    ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. …

    ArcadeData arcadedb
  • High 7.2
    CVE-2026-67340 Public exploit

    ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts

    ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) because ScriptTriggerExecutor adds java.lang.* to the allowed packages. An authenticated user with UPDATE_SCHEMA permission can create a Jav…

    ArcadeData arcadedb com.arcadedb:arcadedb-engine Maven