9.5Kritik

CVE-2026-116366Unauthenticated RCE vulnerability against ClickHouse Server

ClickHouse ClickHouse; ClickHouse ClickHouse Cloud Yayım: (5 gün önce)

Açıklama

An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to execute arbitrary code on the ClickHouse Server.

Zayıflık türü (CWE): CWE-190

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
ClickHouse ClickHouse 26.3 – < 26.3.62.3-lts, 26.8 – < 26.8.36.3-lts, 26.9 – < 26.9.27.3-stable, 26.10 – < 26.10.3.7-stable
ClickHouse ClickHouse Cloud 25.12 – < 25.12.1.1713, 26.2 – < 26.2.1.835, 26.4 – < 26.4.1.2704, 26.6 – < 26.6.1.2439, 26.8 – < 26.8.1.597, 26.10 – < 26.10.2.84

Kaynaklar ve yamalar