CVE-2026-42542

High7.5Published on June 10, 2026

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.

CVSS score7.5 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness type (CWE)CWE-191

Vendorstdengine

Affected products

Vendors	Product	Versions
tdengine	tdengine	< 3.4.1.6

Ransomware

Cybercrime Infrastructure, AI Agents and Exposed Credentials Create New Paths to Compromise

ShinyHunters hits Cl0p, BragJack exploits AI browsers, and LLM-driven malware plus stolen credentials expand compromise paths.

Sep 25, 202617:247 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Cybercrime Infrastructure, AI Agents and Exposed Credentials Create New Paths to Compromise