CVE-2026-58663
N/AAn authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.3%chance of exploitation in 30 days · 20th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
Not classified.
CVSS vector
Not yet scored.
References and research data (JSON)
References
Advisories
- https://lists.apache.org/thread.html/bt2o8n1bb3cv9h7k6rph7b208pfmpp31 CVE record · apache · Updated 2026-10-21T11:03:23.887Z
NVD · CVE-2026-58663 · Updated 2026-10-22T16:56:52.840 - https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107162 EUVD · EUVD-2026-107162
Technical & other
- http://www.openwall.com/lists/oss-security/2026/10/21/20CVE record · CVE · Updated 2026-10-21T18:10:32.408Z
NVD · CVE-2026-58663 · Updated 2026-10-22T16:56:52.840