What is CVE-2026-75841?

CVE-2026-75841 is a medium-severity vulnerability in Arcadedata Arcadedb, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 4.3/10. Published 2026-08-18.

How severe is CVE-2026-75841?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Resource exhaustion in Arcadedata Arcadedb

CVE-2026-75841

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range() expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or unavailability.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Arcadedata Arcadedb

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-75841?: CVE-2026-75841 is a medium-severity vulnerability in Arcadedata Arcadedb, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 4.3/10. Published 2026-08-18.
How severe is CVE-2026-75841?: Medium severity. CVSS v3 base score is 4.3 out of 10.