CyberSecBulletin

Alldatacenter vulnerabilities

We track 2 vulnerabilities in Alldatacenter products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Alldatacenter vulnerabilities

  • 7.5 High severity

    alldata: Missing Authentication for Critical Functionality

    CVE-2026-111613Alldatacenter

    AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can s

  • 7.3 High severity

    A vulnerability was detected in alldatacenter alldata up to 0.6.8.

    CVE-2026-19826Alldatacenter

    A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack