CVE-2026-62351

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read STransCompMsg.contLen when pHead->comp == 1 without first validating that the RPC packet contained the 8-byte STransCompMsg structure, causing an unauthenticated out-of-bounds read, uncontrolled allocation, integer underflow, and server crash. This issue is fixed in version 3.4.1.15.

• CWE-125

• https://github.com/taosdata/TDengine/security/advisories/GHSA-8pc4-p252-f5m7
• https://github.com/taosdata/TDengine/security/advisories/GHSA-8pc4-p252-f5m7

Published

Jul 15, 2026

Last Modified

Jul 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-623289Router through version 0.4.41 contain an unauthenticated in…8.7
• CVE-2026-62343ImageMagick is free and open-source software used for editin…4.7
• CVE-2026-62348TDengine is a time-series database optimized for Internet of…5.4
• CVE-2026-62349TDengine is an open source, time-series database optimized f…8.3
• CVE-2026-6235The Sendmachine for WordPress plugin for WordPress is vulner…9.8
• CVE-2026-62350TDengine is an open source, time-series database optimized f…7.2
• CVE-2026-62353TDengine is a time-series database optimized for Internet of…5.4
• CVE-2026-62354Authorization handling for Parameter Context validation requ…4.3
• CVE-2026-62355TDengine is an open source, time-series database optimized f…5.4
• CVE-2026-6236The Posts map plugin for WordPress is vulnerable to Stored C…6.4
• CVE-2026-62361listmonk is a standalone, self-hosted, newsletter and mailin…5.5
• CVE-2026-62363ImageMagick is free and open-source software used for editin…5