Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-75852 ArcadeDB MongoDB Plugin Fails SASL Authentication Enforcement https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-75852
Post summary
The post simply identifies CVE-2026-75852, mentioning its impact on ArcadeDB's MongoDB plugin authentication, but offers no evidence of exploitation, PoC, patch, or further technical detail.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-75852](https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-fq9c-x968-g278) ... https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-fq9c-x968-g278 #Vulnerability #CVE #ZeroDay
Post summary
The post announces CVE-2026-75852 and links to a GitHub advisory, but provides no additional technical or exploitation details.