CVE WATCH / VULNERABILITY DETAIL
CVE-2026-119577
MEDIUMCVSS 6.8NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access through already-open Postgres, Bolt, MongoDB, or Redis wire-protocol connections. Attackers holding an existing connection can keep reading and writing data after deletion, grant remov
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2015-20130 MEDIUM 6.1
- CVE-2026-111487
- CVE-2010-20125 HIGH 7.5
- CVE-2026-119578 HIGH 7.8
- CVE-2026-119572 HIGH 8.7
- CVE-2026-119573 MEDIUM 4.4
- CVE-2026-115683 MEDIUM 6.8
- CVE-2026-112348 MEDIUM 6.5
- CVE-2026-112347 HIGH 7.6
- CVE-2026-118996