CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-75852 — ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data comm...

·Source: NIST NVD

Updated:

Executive Summary

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.

Analysis

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials. CVSS Score: 9.8. Published: 2026-08-18T12:19:35.593.

Indicators of Compromise (1)

CVE (1)
CVE-2026-75852
Source Attribution

Originally published by NIST NVD on Aug 18, 2026. Verified by: NIST.

Related Threats