CVEvulnerability
CVE-2026-58663
- Status
- Awaiting Analysis
- Published
- 2026-10-21
- Last modified
- 2026-10-22
- Assigner
- [email protected]
Description
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service
This issue affects Apache IoTDB: from 2.0.0 before 2.0.11.
Users are recommended to upgrade to version 2.0.11, which fixes the issue.
References
- https://lists.apache.org/thread.html/bt2o8n1bb3cv9h7k6rph7b208pfmpp31 lists.apache.org
- http://www.openwall.com/lists/oss-security/2026/10/21/20 www.openwall.com