CVE-2026-75850 | ArcadeData ArcadeDB up to 26.8.0 HTTP setCurrentUser access control

August 18, 2026 Yanac

A vulnerability was found in ArcadeData ArcadeDB up to 26.8.0. It has been declared as critical. This affects the function setCurrentUser of the component HTTP Handler. Executing a manipulation can lead to improper access controls.

This vulnerability appears as CVE-2026-75850. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More