CVE-2026-59562

Published: Oct 21, 2026Modified: Oct 22, 2026

Description

Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://lists.apache.org/thread.html/6035x52ct37d03xllc9rw1y5q1zzqthl

Source: security@apache.org

http://www.openwall.com/lists/oss-security/2026/10/21/22

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.