CVE-2026-86471 in CouchDB

Tóm tắt

Bởi MITRE • 20/10/2026

An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating system user.

Users are recommended to upgrade to version 3.5.3, which fixes this issue.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Tiết lộ: 20/10/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-422782
• CPE: 20261020
• CWE: CWE-287 (Đã xác nhận)
• CVSS: 4.7 (VulDB)
• EPSS: 0.00000
• KEV: không
• Các hoạt động: thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-86471
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86471
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-86471/