CYBERSECURITYTRACKER
Permanent story citation

CVE-2026-59562: Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10951

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2026-59562: Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

Apache IoTDB versions 2.0.0 through 2.0.10 contain a missing authentication vulnerability in the legacy pipe sendFile remote procedure call (RPC) that enables remote code execution and unauthenticated path traversal attacks. The vendor released version 2.0.11 to remediate the issue.

Why it matters: Organizations running Apache IoTDB 2.0.0 through 2.0.10 face immediate risk of unauthenticated remote code execution; upgrade to version 2.0.11 immediately.

CVEsCVE-2026-59562
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary