CVE-2023-26462

8.1 highEPSS 1.1%

High (8.1) in thingsboard thingsboard. EPSS 1.1% chance of exploitation in the next 30 days.

ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2023-02-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

thingsboard:thingsboard

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/238544
https://thingsboard.io/docs/reference/releases/
https://exchange.xforce.ibmcloud.com/vulnerabilities/238544
https://thingsboard.io/docs/reference/releases/

Check your stack JSON