{"identifier":"CVE-2026-41114","cve":{"id":"CVE-2026-41114","description":"Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver.\n\n\n\nThis issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11.\n\n\n\nUsers are recommended to upgrade to version 2.0.11, which fixes the issue.","published":"2026-10-21T11:17:07.727000+00:00","modified":"2026-10-22T16:56:52.840000+00:00","status":"Awaiting Analysis","score":null,"severity":"UNSCORED","vector":"","cvss_version":"","affected":[],"weaknesses":["CWE-400"],"references":[{"url":"https://lists.apache.org/thread.html/tvmqslwyqmglr19dccck1s3rxqypj4zc","source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/21/19","source":"af854a3a-2127-422b-91ae-364da2661108"}],"kev":null,"kev_checked":true,"metrics":{},"configurations":[],"source":"nvd","retrieved_at":"2026-10-28T10:20:14.123976+00:00","exploited":false,"kev_stale":false,"products":[],"priority":{"label":"Assess exposure and vendor guidance","reasons":["No higher-priority signal is available in the current stored evidence."]},"epss":{"probability":0.00247,"percentile":0.16071,"date":"2026-10-29","stale":false},"version_assessment":null},"news":[],"campaigns":[],"domains":[{"domain":"lists.apache.org","source_url":"https://lists.apache.org/thread.html/tvmqslwyqmglr19dccck1s3rxqypj4zc","investigate_url":"https://investigate.aeglixmind.com/#lists.apache.org"},{"domain":"www.openwall.com","source_url":"http://www.openwall.com/lists/oss-security/2026/10/21/19","investigate_url":"https://investigate.aeglixmind.com/#www.openwall.com"}],"arsenal_url":"https://arsenal.aeglixmind.com/?cve=CVE-2026-41114","catalog_url":"https://cves.aeglixmind.com/cve/CVE-2026-41114","research_url":"https://investigate.aeglixmind.com/research/cve/CVE-2026-41114","coverage":{"news_candidates_checked":0,"campaign_candidates_checked":0,"bounded":false,"notice":"Exact CVE mentions in stored public excerpts and reviewed campaign content only. A mention is not proof of exploitation, attribution or tool suitability. Missing matches do not establish absence."}}