Tdengine Tdengine vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tdengine Tdengine: 1 record(s), with affected versions and fixes.
cpe:2.3:a:tdengine:tdengine

CVE-2026-42542 High · 7.5 CWE-191 Jun 10, 2026

TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.