Vulnerabilities (CVE)

Filtered by vendor Tdengine Subscribe
Filtered by product Tdengine
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-42542 1 Tdengine 1 Tdengine 2026-06-12 N/A 7.5 HIGH
TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.
CVE-2023-38502 1 Tdengine 1 Tdengine 2024-11-21 N/A 6.5 MEDIUM
TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue.