Threats tagged 'ghsa-vqh4-vww9-5p94'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-119575ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows authenticated High7.12026-10-30GCVE DatabaseCVE-2026-119575 ArcadeDB versions from 26.8.1 up to but not including 26.10.2 contain a server-side request forgery (SSRF) vulnerability. Authenticated users with the updateDatabaseSettings permission can disable the LOAD CSV IP block list by altering the database settings. This allows attackers to clear the blocked IP ranges and issue LOAD CSV requests that can access cloud metadata and internal network services. Report on CVE-2026-119575 Vulnerability CWE-918 #ghsa-vqh4-vww9-5p94	GCVE Database	2026-10-30

Page 1 of 1