Beveiligingsadvies

CVE-2026-63741

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 12:04:35

Laatst bijgewerkt 2026-07-28 01:05:37

Toegewezen door VulnCheck

CVSS-score 6.9

Status PUBLISHED

Beschrijving

SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create arbitrary namespaces and databases by issuing USE commands, bypassing authorization checks in the RPC use method and SurrealQL executor.

← Alle CVE's bekijken Bekijk op cve.org ↗