Thingsboard

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-9094 MEDIUM This Month

A vulnerability was detected in ThingsBoard 4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Thingsboard

NVD VulDB

CVSS 4.0

5.3

EPSS

0.0%

CVE-2024-55466 MEDIUM POC This Month

An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection RCE File Upload Thingsboard

NVD GitHub

CVSS 3.1

6.5

EPSS

0.4%

CVE-2025-9094

EPSS 0% CVSS 5.3

MEDIUM This Month

A vulnerability was detected in ThingsBoard 4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Thingsboard

NVD VulDB

CVE-2024-55466

EPSS 0% CVSS 6.5

MEDIUM POC This Month

Command Injection RCE File Upload +1

NVD GitHub