Xancyber

**Name of the Vulnerable Software and Affected Versions** ArcadeDB versions prior to 26.8.1 **Description** The Redis wire-protocol plugin lacks proper authentication, allowing unauthenticated attackers to connect to the Redis port. This enables the execution of arbitrary commands against any database on the server to read, write, and delete data, effectively bypassing all security gates. **Recommendations** Update to version 26.8.1 or later.