https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:40:06.327783+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-24780 CVE-2024-24780 — Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function 2026-10-03T17:40:06.329779+00:00

Affected: Apache Software Foundation Apache IoTDB

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.

This issue affects Apache IoTDB: from 1.0.0 before 1.3.4.

Users are recommended to upgrade to version 1.3.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-f4rq-f4j9-f6rm GHSA-f4rq-f4j9-f6rm — Apache IoTDB Vulnerable to Remote Code Execution 2026-10-03T17:40:06.329870+00:00

Affected: Maven: org.apache.iotdb:iotdb-core, PyPI: apache-iotdb

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.

This issue affects Apache IoTDB: from 1.0.0 before 1.3.4.

Users are recommended to upgrade to version 1.3.4, which fixes the issue.