TDengine
Taosdata · 8 CVEs
CVE-2026-62353
MEDIUM
TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken
Jul 15, 2026
CVE-2026-62351
HIGH
TDengine: Unauthenticated Remote Denial of Service via Out-of-Bounds Read in transDecompressMsg
Jul 15, 2026
CVE-2026-62348
MEDIUM
TDengine: KILL SSMIGRATE missing authorization lets low-privilege users interrupt shared-storage migrations
Jul 15, 2026
CVE-2026-62349
HIGH
TDengine: Off-by-One Buffer Overflow
Jul 15, 2026
CVE-2026-62350
HIGH
TDengine: UDF lead to RCE
Jul 15, 2026
CVE-2026-62355
MEDIUM
TDengine: Standard User permission unexpect
Jul 15, 2026
CVE-2026-42542
HIGH
TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)
Jun 10, 2026
CVE-2023-38502
MEDIUM
TDengine Database Denial-of-Service
Jul 25, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-62353 | TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken | MEDIUM | 0.33% | Jul 15, 2026 |
| CVE-2026-62351 | TDengine: Unauthenticated Remote Denial of Service via Out-of-Bounds Read in transDecompressMsg | HIGH | 0.46% | Jul 15, 2026 |
| CVE-2026-62348 | TDengine: KILL SSMIGRATE missing authorization lets low-privilege users interrupt shared-storage migrations | MEDIUM | 0.29% | Jul 15, 2026 |
| CVE-2026-62349 | TDengine: Off-by-One Buffer Overflow | HIGH | 0.57% | Jul 15, 2026 |
| CVE-2026-62350 | TDengine: UDF lead to RCE | HIGH | 0.54% | Jul 15, 2026 |
| CVE-2026-62355 | TDengine: Standard User permission unexpect | MEDIUM | 0.23% | Jul 15, 2026 |
| CVE-2026-42542 | TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS) | HIGH | 0.56% | Jun 10, 2026 |
| CVE-2023-38502 | TDengine Database Denial-of-Service | MEDIUM | 0.68% | Jul 25, 2023 |
Showing 1 to 8 of 8 CVEs