CVE-2026-425427.5HighCWE-191
CVE-2026-42542: TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)
taosdata · TDengine
No fix listed · Affected: taosdata TDengine · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.09 (9 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.6%probability of exploitation in the next 30 days
46th percentile
050100
Higher than 46% of scored CVEs
7.5HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityWeek, 25 Sep.
Quiet for 6 weekslast report 28 Sep2 articles2 outlets
- Fri 25 Sep, 15:18 UTC. SecurityWeek, first report. BragJack Lets Malicious Extensions Hijack Browser AI Assistants.
- Mon 28 Sep, 21:55 UTC. Dark Reading, its first report on the story. TDengine Zero-Day Lets Attackers Crash Servers with One Packet.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 25 Sep 15:18 | SecurityWeek | BragJack Lets Malicious Extensions Hijack Browser AI Assistants |
| 28 Sep 21:55 | Dark Reading | TDengine Zero-Day Lets Attackers Crash Servers with One Packet |
- BragJack Lets Malicious Extensions Hijack Browser AI AssistantsSecurityWeek · first in our coverage
New articles also arrive in the RSS feed.