{"items":[{"id":"CVE-2026-116366","published":"2026-10-30T11:00:11.115Z","updated":"2026-10-30T16:36:32.335Z","title":"Unauthenticated RCE vulnerability against ClickHouse Server","severity":"CRITICAL","score":9.5,"vendor":"ClickHouse","product":"ClickHouse","kev":false,"epss":0.00962,"kevAdded":null},{"id":"CVE-2025-1386","published":"2025-04-11T04:27:35.846Z","updated":"2025-04-11T16:01:28.660Z","title":"Query smuggling in ch-go library","severity":"MEDIUM","score":5.9,"vendor":"ch-go","product":"ch-go","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2025-1385","published":"2025-03-20T07:13:34.577Z","updated":"2025-03-20T15:10:30.494Z","title":"Fail input validation in clickhouse-library-bridge API could lead to RCE under specific configuration","severity":"HIGH","score":7.5,"vendor":"ClickHouse","product":"ClickHouse OSS","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2024-6873","published":"2024-08-01T15:57:25.304Z","updated":"2024-08-02T15:18:28.271Z","title":"Specially crafted request could caused undefined behaviour which may lead to Remote Code Execution.","severity":"HIGH","score":8.1,"vendor":"ClickHouse","product":"ClickHouse","kev":false,"epss":0.00721,"kevAdded":null}]}