https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:12:10.165208+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-272974 EUVD-2026-272974 2026-10-04T03:12:10.168187+00:00 EUVD-2026-272974 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24780 fkie_cve-2024-24780 2026-10-04T03:12:10.168227+00:00

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.

This issue affects Apache IoTDB: from 1.0.0 before 1.3.4.

Users are recommended to upgrade to version 1.3.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-f4rq-f4j9-f6rm GHSA-f4rq-f4j9-f6rm — Apache IoTDB Vulnerable to Remote Code Execution 2026-10-04T03:12:10.168301+00:00

Affected: Maven: org.apache.iotdb:iotdb-core, PyPI: apache-iotdb

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.

This issue affects Apache IoTDB: from 1.0.0 before 1.3.4.

Users are recommended to upgrade to version 1.3.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-24780 gsd-2024-24780 2026-10-04T03:12:10.168329+00:00 gsd-2024-24780 https://cve.radiocsirt.org/vuln/pysec-2025-59 PYSEC-2025-59 2026-10-04T03:12:10.168342+00:00

Affected: PyPI: apache-iotdb

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.

This issue affects Apache IoTDB: from 1.0.0 before 1.3.4.

Users are recommended to upgrade to version 1.3.4, which fixes the issue.