Skip to content

Vendor

taosdata

Alert
No taosdata CVE is in the CISA KEV catalogue.

Tracked since 25 Sep · latest article 28 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No taosdata CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds taosdata CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a taosdata CVE to KEV.

Fix listed

0 of 1 CVE in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-42542: 46.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-4254246.8

Coverage2 articles · all time

The latest 2 articles naming taosdata, in the shared story grammar.

Full timeline
Quiet for 6 weekslast report 28 Sep2 articles2 outlets

2 articles from 2 outlets since 25 Sep. Quiet since 28 Sep.

Now25 Sep26272829First reportSecurityWeek · 25 Sep, 15:18Picked up againafter 3 days quiet
  • Fri 25 Sep, 15:18 UTC. SecurityWeek, first report. BragJack Lets Malicious Extensions Hijack Browser AI Assistants.
  • Mon 28 Sep, 21:55 UTC. Dark Reading, its first report on the story. TDengine Zero-Day Lets Attackers Crash Servers with One Packet.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 2 articles as a list
  1. Fri 25 SepDay 01
  2. Quiet for 3 days

    Mon 28 SepDay 31

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)

    7.5High0.6% EPSS · 2 articles
Updated AboutDevelopersSign in