Missing Authentication Vulnerability in Apache IoTDB by Apache
CVE-2026-59562

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Iotdb
Vendor
CVE Published:
21 October 2026

What is CVE-2026-59562?

A missing authentication vulnerability has been identified in Apache IoTDB, which could allow unauthorized access to critical functions within the system. This issue affects versions of Apache IoTDB from 2.0.0 to 2.0.10. To mitigate this risk, users are strongly advised to update to version 2.0.11, where the authentication flaw has been addressed and fixed.

Affected Version(s)

Apache IoTDB 2.0.0 < 2.0.11

References

https://lists.apache.org/thread.html/6035x52ct37d03xllc9r...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

tonghuaroot
Opr4
.