Beveiligingsadvies

CVE-2026-63747

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 12:04:40
Laatst bijgewerkt 2026-07-28 01:05:41
Toegewezen door VulnCheck
CVSS-score 8.7
Status PUBLISHED

Beschrijving

SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler that panics when db is set without a namespace. Unauthenticated attackers can send a malformed WebSocket message to the /rpc endpoint to crash the server process.