Yugabytedb Inc Yugabytedb Anywhere
3 CVEs affecting Yugabytedb Inc Yugabytedb Anywhere. Latest disclosed: 2026-02-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1966 | | 2026-02-05 | YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration v… | |
CVE-2025-8866 | | 2025-08-11 | YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An unauthenticated attacker could exploit th… | |
CVE-2025-8864 | | 2025-08-11 | Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup logs |