#TDengine
CVE-2026-62849 - thinglinks
The TDengine TDS component in ThingLinks versions before 1.4.0 lets anyone send specially crafted requests that alter the time‑series data stored by the system. An attacker…

Too many irrelevant or confusing CVEs? Use stackflag.com

#thinglinks #mqttsnet #CVE #infosec
CVE-2026-62849: ThingLinks TDengine TDS APIs allow remote data tampering
The TDengine TDS component in ThingLinks versions before 1.4.0 lets anyone send specially crafted requests that alter the time‑series data stored by the.
stackflag.com
October 30, 2026 at 10:20 PM
🚨 EUVD-2026-114457
📊 9.1/10
🏢 mqttsnet

📝 ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows request-cont...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114457

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 10:02 PM
🚨 CVE-2026-62849
CVSS 9.1 / EPSS 0.5% / KEV: No
TL;DR: ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows request-controlled JSON field…
https://cvesentinel.com/report/CVE-2026-62849
#infosec #CVE #vulnerability
October 31, 2026 at 6:23 PM
We benchmarked Arc vs TDengine.

Arc wins historical aggregations.

TDengine wins latest-value lookups.

Different designs, different strengths.

basekick.net/blog/tdengin...
TDengine Alternative: Arc vs TDengine, Benchmarked | Basekick Labs
Arc vs TDengine on TSBS IoT at 10,000 and 100,000 tags: ingest, storage and nine queries checked row for row, plus pricing and features by edition.
basekick.net
October 28, 2026 at 3:30 PM
One Packet Can Crash OT Servers in Industrial Sectors https://www.darkreading.com/ics-ot-security/one-packet-crash-servers-tdengine
September 30, 2026 at 1:09 AM
darkreading: TDengine zero-day lets one malformed packet crash OT servers across energy, auto, industrial. The structural flaw: critical-path time-series parsers run unaudited C with zero formal verification. Trust boundary is memory safety.
September 29, 2026 at 1:15 PM
One Packet Can Crash OT Servers in Industrial Sectors
One Packet Can Crash OT Servers in Industrial Sectors
A high-severity zero-day vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automotive environments.
www.darkreading.com
September 28, 2026 at 10:08 PM
CVE-2026-42542: A Single Packet Crashes Industrial TDengine Servers
CVE-2026-42542: A Single Packet Crashes Industrial TDengine Servers
A malicious TCP packet crashes TDengine without authentication. CVE-2026-42542 affects 730,000+ industrial instances: mechanism, impact, and patch.
deafnews.it
September 28, 2026 at 10:08 PM
A high-severity zero-day vulnerability in the TDengine time-series database can crash operational technology servers in industrial, IoT, energy and automotive environments.

Source: Dark Reading
Just a moment...
A high-severity zero-day vulnerability in the TDengine time-series database can crash operational technology servers in industrial, IoT, energy and automotive environments.
www.darkreading.com
September 28, 2026 at 9:54 PM
One malformed packet to TCP/6030 can crash TDengine's taosd - no login needed. https://intel.threadlinqs.com/threat/TL-2026-2746 #ThreatIntel #CVE_2026_42542 #GHSAvg95j2hfhvjx #TDSEC2026001
September 28, 2026 at 9:45 PM
过去 30 分钟的话题 🧭:

1. TDengine一個惡意封包就能癱瘓OT伺服器 🆕
2. 這效率高到讓人發寒 🆕
3. 工控大哥們心臟還好嗎 🆕
4. AI殭屍網Carbonato更屌 🆕
5. 用AI框架偷Docker 🆕
6. API 🆕
7. Key 🆕
8. AI不只寫程式 🆕
9. 還幫駭客找錢包 🆕
10. 最扯是Bitget 🆕
September 28, 2026 at 10:32 PM
TDengine一個惡意封包就能癱瘓OT伺服器,這效率高到讓人發寒,工控大哥們心臟還好嗎?💀 AI殭屍網Carbonato更屌,用AI框架偷Docker API Key,AI不只寫程式,還幫駭客找錢包。最扯是Bitget,買了資安產品被搞掉3.88億美元,證明資安產品自己也能是破口。各位,沒有絕對的安全啊! #資安 #零日漏洞 #供應鏈資安 #AI資安
September 28, 2026 at 10:26 PM
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure

Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update ov…

Telegram AI Digest
#ai #news
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul.
www.securityweek.com
September 26, 2026 at 10:53 AM
Just another wonderful week where things quietly burn, threatening industrial telemetry uptime thanks to a TDengine flaw and hitting users of browser AI assistants via the BragJack attack. Defending operations from this relentless parade of headaches requires surviving an Ubuntu ...

Read full story
September 26, 2026 at 11:41 AM
В других новостях: захват сайта утечек Clop, ботнет Docker охотится за ключами ИИ, утечка данных водоканала

Примечательные истории, которые могли остаться незамеченными: атака BragJack на браузерные ИИ-помощники, уязвимость TDengine угрожает бесперебойной работе про…

Telegram ИИ Дайджест
#ai #news
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
www.securityweek.com
September 26, 2026 at 10:40 AM
-New malware: Psychedelic Stealer, BotHelper RAT, Carbonato botnet, PavokwiLoader, Sauron, Corp MDM Android spyware, RemControl and RedWing Android banking trojans
-New Roundcube bug exploited in the wild
-TrustSink technique
-TDengine vulnerability impacts IoT and ICS devices
September 25, 2026 at 8:08 AM
DockerボットネットがAIキーを探索。BragJack攻撃がブラウザAIアシスタントを標的に。TDengineの脆弱性が産業テレメトリの停止を脅かす。
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
ShinyHunters seizes Clop’s leak site, CARBONATO botnet hunts AI keys on Docker hosts, and infostealer exposure in the US water sector.
www.securityweek.com
September 25, 2026 at 5:08 PM
New OT zero-day can take down a database with one packet, and you may not know it’s there 

Ridge researchers discovered CVE-2026-42542, a high-severity vulnerability in TDengine, a time-series database used in industrial IoT, manufacturing, energy, connected vehicles and other environments that…
New OT zero-day can take down a database with one packet, and you may not know it’s there 
Ridge researchers discovered CVE-2026-42542, a high-severity vulnerability in TDengine, a time-series database used in industrial IoT, manufacturing, energy, connected vehicles and other environments that rely on machine and sensor data. The basic problem is pretty striking: an unauthenticated attacker can crash a TDengine server with a single malformed packet. No credentials, session or user interaction are required. Ridge has not yet observed exploitation or identified any attack IOCs – however, AI-aided vulnerability discovery and chaining have substantially changed the security equation, and the pace of exploitation is only expected to increase.
itnerd.blog
September 24, 2026 at 7:58 PM
TDengine, IIoT için tasarlanmış, yüksek performanslı, ölçeklenebilir zaman serisi veritabanıdır. Milyarlarca sensör verisini işler, yüksek kardinalite sorununa çözüm sunar.

github.com/taosdata/TDe...

#IIoT #ZamanSerisi #Veritabanı
GitHub - taosdata/TDengine: High-performance, scalable time-series database designed for Industrial IoT (IIoT) scenarios
High-performance, scalable time-series database designed for Industrial IoT (IIoT) scenarios - taosdata/TDengine
github.com
September 23, 2026 at 5:10 AM
🟠 CVE-2026-62351 - High (7.5)

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, s...

https://www.thehackerwire.com/vulnerability/CVE-2026-62351/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
July 15, 2026 at 8:00 PM
🟠 CVE-2026-62349 - High (8.3)

TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4...

https://www.thehackerwire.com/vulnerability/CVE-2026-62349/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
July 15, 2026 at 8:00 PM
🟠 CVE-2026-42542 - High (7.5)

TDengine is an open source, time-series database optimized for Internet of Things devices. In ver...

https://www.thehackerwire.com/vulnerability/CVE-2026-42542/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
June 11, 2026 at 6:01 AM