Skip to content
Threat Feed
Subscribe

Product

ArcadeDB (< 26.7.2)

1 brief RSS
critical advisory

Remote Code Execution in ArcadeDB via Script Triggers

An authenticated remote code execution vulnerability (CVE-2026-67340) in ArcadeDB engine versions before 26.7.2 allows attackers to escape script sandboxing and execute arbitrary OS commands.

PoC arcadedb-engine +1 cve-2026-67340 rce database arcadedb
1t 1c 1i updated