CVE-2026-53676
ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product w…
Published: 2026-06-17 · CVSS: 8.6 · CVSS 4.0
ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administrator privilege (TENANT_ADMIN).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7