Thingsboard, Inc. Thingsboard
1 CVEs affecting Thingsboard, Inc. Thingsboard. Latest disclosed: 2025-10-17. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34282 | Critical | 9.1 | 2025-10-17 | ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload… |