PT-2026-76951

CVE-2026-75854

Published

2026-08-18

Updated

2026-10-22

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.8.1

Description The Redis wire-protocol plugin lacks proper authentication, allowing unauthenticated attackers to connect to the Redis port. This enables the execution of arbitrary commands against any database on the server to read, write, and delete data, effectively bypassing all security gates.

Recommendations Update to version 26.8.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-306: Missing Authentication for Critical Function

Related identifiers

CVE-2026-75854