https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:25:02.948112+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-75852 CVE-2026-75852 — ArcadeDB MongoDB wire protocol authentication bypass cross-database 2026-10-06T17:25:02.963377+00:00

Affected: ArcadeData arcadedb

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.