https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:43:16.569330+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335706 EUVD-2026-335706 2026-10-08T20:43:16.618560+00:00 EUVD-2026-335706 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40452 fkie_cve-2026-40452 2026-10-08T20:43:16.618599+00:00

Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users.

This issue affects Apache IoTDB: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10.

Users are recommended to upgrade to version 2.0.10, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-xxj7-h37p-p48c GHSA-xxj7-h37p-p48c 2026-10-08T20:43:16.618643+00:00

Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users.

This issue affects Apache IoTDB: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10.

Users are recommended to upgrade to version 2.0.10, which fixes the issue.