https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:36:00.768386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-354890 EUVD-2026-354890 2026-10-06T19:36:00.815247+00:00 EUVD-2026-354890 https://cve.radiocsirt.org/vuln/fkie_cve-2026-75852 fkie_cve-2026-75852 2026-10-06T19:36:00.815288+00:00

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.

 https://cve.radiocsirt.org/vuln/ghsa-xgx7-2w7q-r9mc GHSA-xgx7-2w7q-r9mc 2026-10-06T19:36:00.815322+00:00

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.