CVE-2026-40006: Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiver

<p>Posted by Haonan Hou on Jul 10</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache IoTDB 1.0.0 before 2.0.10<br /> <br /> Description:<br /> <br /> Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing <br /> Authentication for Critical Function vulnerability in Apache IoTDB.<br /> When pipe_air_gap_receiver_enabled=