HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-75855 — ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api...

·Source: NIST NVD

Updated:

Executive Summary

ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names containing ../ sequences to create databases at arbitrary filesystem paths or recursively delete director

Analysis

ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names containing ../ sequences to create databases at arbitrary filesystem paths or recursively delete directories the server process can access. CVSS Score: 8.7. Published: 2026-08-18T12:19:35.997.

Indicators of Compromise (1)

CVE (1)
CVE-2026-75855
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 18, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-75877 — A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affec...

A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

CVE-2026-75877
NIST NVD
LOWVulnerabilityNEW

Comcast turns your Xfinity WiFi into a home motion detector

Comcast is promoting WiFi-based motion detection as a part of its new Xfinity Shield home protection platform, allowing routers and wireless devices to detect people moving through a home without cameras or motion sensors. [...]

BleepingComputer
MEDIUMVulnerabilityNEW

Crypto firm MoonPay adds CashApp Pay as payment method

MoonPay has become the first and only platform to offer Cash App Pay as a payment method for digital asset purchases. Eligible US customers can now use their Cash App balance to purchase digital assets on MoonPay and through select partners across its network.*

Finextra