CVE-2026-42542: TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-06-10 · updated 2026-07-23
Weakness: CWE-191

Description

TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.

Affected products

taosdata TDengine: from 3.4.0.0 before 3.4.1.6 — fixed in 3.4.1.6

How to fix

Upgrade to a fixed version: taosdata TDengine 3.4.1.6. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-42542 or the next vulnerability affects your stack