com.arcadedb:arcadedb-engine vulnerabilities (Maven)

4 vulnerabilities.

• com.arcadedb:arcadedb-engine Maven ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION CVE-2026-67341 Fix available 9.3 CriticalJuly 16, 2026
• com.arcadedb:arcadedb-engine Maven ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts CVE-2026-67340 Public exploitFix available 8.6 HighJuly 16, 2026
• com.arcadedb:arcadedb-engine Maven ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221) CVE-2026-54076 Fix available 8.1 HighJuly 16, 2026
• com.arcadedb:arcadedb-engine Maven ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users CVE-2026-54077 Fix available 7.1 HighJuly 16, 2026