CVE-2026-24015
Published: 09 March 2026
Summary
CVE-2026-24015 is a critical-severity Binding to an Unrestricted IP Address (CWE-1327) vulnerability in Apache Iotdb. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 6.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly requires timely identification, reporting, and remediation of flaws like CVE-2026-24015 by applying vendor-recommended upgrades to Apache IoTDB versions 1.3.7 or 2.0.7.
Mandates vulnerability scanning to identify CVE-2026-24015 in affected Apache IoTDB versions deployed in the system.
Requires monitoring and acting on external security advisories, such as Apache announcements for CVE-2026-24015, to enable proactive flaw remediation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unauthenticated remote network exploitation of a public-facing database service enabling full CIA compromise directly matches initial access via public application exploitation.
NVD Description
A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.
Deeper analysisAI
CVE-2026-24015 is a vulnerability in Apache IoTDB, a time-series database for IoT applications. It affects versions from 1.0.0 before 1.3.7 and from 2.0.0 before 2.0.7. The issue has a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and is linked to CWE-1327, with additional NVD-CWE-noinfo classification.
Unauthenticated remote attackers can exploit this vulnerability over the network with low attack complexity and without requiring user interaction. Successful exploitation enables high-impact compromise of confidentiality, integrity, and availability on affected systems.
Apache advisories recommend upgrading to version 1.3.7 or 2.0.7, which address the issue. Further details are provided in the security announcements at https://lists.apache.org/thread/j769ywdqm46zl3oz5lbffsldklg0ow7p and http://www.openwall.com/lists/oss-security/2026/03/09/5.
Details
- CWE(s)