Get the latest updates!

Ridge Security Research Team

One Packet Can Take Down the Database Behind Industrial Operations: Ridge Security Discovers CVE-2026-42542

One Packet Can Take Down the Database Behind Industrial Operations: Ridge Security Discovers CVE-2026-42542

The Ridge Security Research Team discovered CVE-2026-42542, a high-severity pre-authentication flaw (CVSS 7.5) in TDengine, an open-source time-series database powering industrial SCADA, IoT, and utilities. With no credentials or user interaction, an unauthenticated attacker can crash the server using a single malformed packet. Organizations should upgrade to version 3.4.1.6 immediately.