CVE ID :CVE-2026-62849 Published : Oct. 30, 2026, 9:17 p.m. | 44 minutes ago Description :ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows request-controlled JSON field values submitted to...

#Sicherheitslücke #IoT

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-62849 - ThingLinks TDengine TDS APIs vulnerable to unauthenticated SQL injection

VERWANDTEARTIKEL

CVE-2026-63346 - Refitter: C# source injection through OpenAPI header parameter names

CVE-2026-63377 - TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover

CVE-2026-63378 - TAKO AI Agent for Okta: Authenticated Python execution through validator bypass

CVE-2026-63393 - OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

CVE-2026-63396 - Coop has a data leak via unauthenticated GraphQL Query.allOrgs

CVE-2026-63338 - IXP Manager has Broken Object-Level Authorization