[CVE-2026-42542] TDengine is an open source, time-series database optimized for Internet of Things devices. In versio…

Descripción técnica

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Productos afectados

Tdengine — Tdengine

Debilidades (CWE)

CWE-191

Fuente oficial

Publicado en NIST NVD.