Medium severity4.3NVD Advisory· Published Aug 18, 2026

CVE-2026-75841

Description

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range() expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or unavailability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ArcadeDB/ArcadeDBllm-fuzzy
Range: <26.8.1
Arcadedata/Arcadedbllm-fuzzy
Range: <26.8.1

Patches

Vulnerability mechanics

References

github.com/ArcadeData/arcadedb/security/advisories/GHSA-xmjm-8q85-g778nvd
www.vulncheck.com/advisories/arcadedb-before-denial-of-service-via-rangenvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000