CVE-2026-24015

CVE-2026-24015: Apache IoTDB: Insecure Default Configuration Vulnerability

Vendor Apache Software Foundation
Product Apache IoTDB
Weakness CWE-1327
Published March 9, 2026
Last update March 10, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

Description

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.

Key dates

Disclosure timeline

March 9, 2026 CVE published
March 10, 2026 Record updated