security_identifier

CVE-2026-42542

Identifier for a pre-authentication integer-underflow flaw in the RPC message handling of the TDengine time-series database.

Known aliases

GHSA-vg95-j2hf-hvjx

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

A single unauthenticated packet crashes TDengine's taosd through an integer underflow

Ridge Security disclosed CVE-2026-42542, an integer underflow that lets one unauthenticated packet to TCP/6030 crash TDengine's taosd process. Repeated packets keep it in a restart loop, and TDengine fixed it in version 3.4.1.6.

Publishers:dev.to

Reality

Evidence55
Adoption: Insufficient
Hype gap+10
Incentives40
Confidence55

security1 publisher

One unauthenticated packet crashes TDengine, the database behind factory and EV telemetry

Ridge Security disclosed CVE-2026-42542, a flaw that lets an unauthenticated attacker crash a TDengine server with one malformed packet on port 6030. A patch shipped in 3.4.1.6, and the only proven payoff is a crash.

Publishers:ridgesecurity.ai

Reality

Evidence55
Adoption: Insufficient
Hype gap+10
Incentives60
Confidence50