https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T10:00:51.180625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40005 CVE-2026-40005 — Apache IoTDB: Path Traversal in Pipe File Transfer Receiver 2026-10-17T10:00:51.182429+00:00

Affected: Apache Software Foundation Apache IoTDB

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. An attacker can write arbitrary files anywhere the IoTDB process has write permissions with unsafe API.

This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.

Users are recommended to upgrade to version 2.0.10, which fixes the issue.