9.5Kritik
CVE-2026-116366Unauthenticated RCE vulnerability against ClickHouse Server
Açıklama
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.
Zayıflık türü (CWE):
CWE-190
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ClickHouse | ClickHouse | 26.3 – < 26.3.62.3-lts, 26.8 – < 26.8.36.3-lts, 26.9 – < 26.9.27.3-stable, 26.10 – < 26.10.3.7-stable | |
| ClickHouse | ClickHouse Cloud | 25.12 – < 25.12.1.1713, 26.2 – < 26.2.1.835, 26.4 – < 26.4.1.2704, 26.6 – < 26.6.1.2439, 26.8 – < 26.8.1.597, 26.10 – < 26.10.2.84 |