Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
Library:
com.arcadedb:arcadedb-engine
CVE-2026-54076
HIGH
CVSS 8.1
Verified Advisory
Jul 16, 2026
Incomplete authorization fix in ArcadeDB schema mutation operations (CVE-2026-54076)
CVE-2026-54076 is an incomplete fix of CVE-2026-44221 in ArcadeDB's engine schema layer, where the prior patch added an UPDATE_SCHEMA authorization check to only one schema-mutating method (LocalDocumentType.createPro...
Fixed in 26.6.1
Authentication Bypass
Java
CVE-2026-54077
HIGH
CVSS 7.1
Verified Advisory
Jul 16, 2026
SSRF and file read in ArcadeDB (CVE-2026-54077)
CVE-2026-54077 is a vulnerability in ArcadeDB's `IMPORT DATABASE` SQL statement that allowed any authenticated user with SQL command access to perform Server-Side Request Forgery (CWE-918) and arbitrary local file rea...
Fixed in 26.6.1
Path Traversal
SSRF
Java