PT-2026-24047 · Apache · Apache Iotdb

Bugbunny_Ai + 1 · Published 2026-03-09 · Updated 2026-03-18 · CVE-2026-24015

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 1.0.0 through 1.3.6 Apache IoTDB versions 2.0.0 through 2.0.6

Description A security issue exists in Apache IoTDB. Users are advised to upgrade to a fixed version to address the problem.

Recommendations Upgrade to version 1.3.7. Upgrade to version 2.0.7.

Fix

Weakness Enumeration

CWE-1327

Related Identifiers

CVE-2026-24015

GHSA-74CF-PGH9-M5Q2

Affected Products

Apache Iotdb

References · 16

• https://lists.apache.org/thread/j769ywdqm46zl3oz5lbffsldklg0ow7p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-24015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24015 · Security Note
• https://osv.dev/vulnerability/GHSA-74cf-pgh9-m5q2 · Vendor Advisory
• https://github.com/apache/iotdb/compare/v2.0.6...v2.0.7 · Note
• https://github.com/apache/iotdb/releases/tag/v1.3.7 · Note
• https://github.com/apache/iotdb/releases/tag/v2.0.7 · Note
• https://github.com/apache/iotdb · Note
• https://github.com/apache/iotdb/compare/v1.3.6...v1.3.7 · Note
• https://twitter.com/CVEarity/status/2031005560532037903 · Twitter Post
• http://openwall.com/lists/oss-security/2026/03/09/5 · Note
• https://twitter.com/oss_security/status/2030919176122970124 · Twitter Post
• https://twitter.com/leak_ix/status/2034312727741472934 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2030908309658538442 · Twitter Post
• https://twitter.com/CVEnew/status/2031122560960667956 · Twitter Post