https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:14:31 +0000 https://cve.radiocsirt.org/vuln/cve-2026-75855 <p><strong>Affected:</strong> ArcadeData arcadedb</p> <p>ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint&#39;s create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names containing ../ sequences to create databases at arbitrary filesystem paths or recursively delete directories the server process can access.</p> <p><strong>Affected:</strong> ArcadeData arcadedb</p> <p>ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint&#39;s create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names containing ../ sequences to create databases at arbitrary filesystem paths or recursively delete directories the server process can access.</p> https://cve.radiocsirt.org/vuln/cve-2026-75855