{"uuid": "e8a17fa6-f0e9-40ad-8a92-277ef874b1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75854", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117116398789961703", "content": "CVE-2026-75854: ArcadeDB &lt;26.8.1 has a CRITICAL Redis plugin vuln (CVSS 9.3). Missing auth lets attackers run any command &amp; access/modify/delete all DB data. Restrict Redis port access &amp; monitor for fixes. https://radar.offseq.com/threat/cve-2026-75854-missing-authentication-for-critical-function-in-arcadedata-arcadedb-033f47986cfb9941 #OffSeq #Vuln #ArcadeDB #Infosec", "creation_timestamp": "2026-08-18T12:00:26.116817Z"}