CVE-2026-67342
1 advisory.
Maven/com.arcadedb:arcadedb-server CVE-2026-67342: high, EPSS 0.54%
ArcadeDB has cross-database IDOR: /ts/*, /batch/*, Prometheus and Grafana handlers bypass authorization
Action: Upgrade com.arcadedb:arcadedb-server to 26.7.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.7.2 | - |
Fixed versions
| 26.7.2 |
Sources
- osv: GHSA-x8mg-6r4p-87pf
- https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-x8mg-6r4p-87pf
- https://github.com/ArcadeData/arcadedb
- https://github.com/ArcadeData/arcadedb/releases/tag/26.7.2
CVE-2026-67342 · published · modified · JSON