High-performance, scalable time-series database designed for Industrial IoT (IIoT) scenarios - taosdata/TDengine

Ridge researchers discovered CVE-2026-42542, a high-severity vulnerability in TDengine, a time-series database used in industrial IoT, manufacturing, energy, connected vehicles and other environments that rely on machine and sensor data. The basic problem is pretty striking: an unauthenticated attacker can crash a TDengine server with a single malformed packet. No credentials, session or user interaction are required. Ridge has not yet observed exploitation or identified any attack IOCs – however, AI-aided vulnerability discovery and chaining have substantially changed the security equation, and the pace of exploitation is only expected to increase.

ShinyHunters seizes Clop’s leak site, CARBONATO botnet hunts AI keys on Docker hosts, and infostealer exposure in the US water sector.

The analysis of the TDengine project code using PVS-Studio reveals classic errors and typos. Developers could′ve avoided many of them if they had carefully designed the code in the first place, kept.....

Get ready for code smells, classic errors, and typos when checking the TDengine project using PVS-Studio. Much of this is avoidable if we design code carefully from the beginning, keep the logic...

Get ready for code smells, classic errors, and typos when checking the TDengine project using PVS-Studio. Developers could′ve prevented many of them if they had carefully designed the code in the...

Static code analysis is one of the most important components of secure software development. It detects errors and potential vulnerabilities early in the development process, when they′re cheaper and....

Static code analysis is one of the most important components of secure software development. It detects errors and potential vulnerabilities early in the development process, when they′re cheaper and....

Choosing an IoT database in 2026: MQTT ingestion paths, edge constraints, cardinality, and retention. InfluxDB 3, TimescaleDB, VictoriaMetrics, GreptimeDB, ClickHouse, IoTDB, TDengine, SQLite, and Arc...

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a Data Reader admin_user on a TDengine Cloud DB instance could run create udf even though standard users should have read-only permissions for non-database objects and show dnodes and create user were denied. This …

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with create udf privilege could upload a crafted shared library and install it as a user-defined function, such as eval, then execute arbitrary C code on the TDengine server side through database …

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allowed an authenticated low-privilege SQL user to run KILL SSMIGRATE against an active shared-storage migration because mndProcessKillSsMigrateReq called mndKillSsMigrate while the intended MND_OPER_SSMIGRATE_DB privilege check was commented out. This issue is fixed in …

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString() checks space for only one byte before processing SQL string escape sequences \%, \_, or \x, allowing a one-byte out-of-bounds write to the stack buffer tmpTokenBuf that can cause denial of …

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read STransCompMsg.contLen when pHead->comp == 1 without first validating that the RPC packet contained the 8-byte STransCompMsg structure, causing an unauthenticated out-of-bounds read, uncontrolled allocation, integer underflow, and server crash. This issue is fixed …

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented past a trailing backslash in a SQL string literal such as 'abc\ and read one byte beyond the null terminator, allowing an authenticated user who can submit SQL queries to crash the server …