Beveiligingsadvies

CVE-2026-40008

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-10 07:13:27

Laatst bijgewerkt 2026-07-10 14:54:56

Toegewezen door apache

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName().newInstance() without any validation or allowlisting. This issue affects Apache IoTDB: from 1.0.0 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗