The Ridge Security Research Team discovered CVE-2026-42542, a high-severity pre-authentication flaw (CVSS 7.5) in TDengine, an open-source time-series database powering industrial SCADA, IoT, and utilities. With no credentials or user interaction, an unauthenticated attacker can crash the server using a single malformed packet. Organizations should upgrade to version 3.4.1.6 immediately.



