Beveiligingsadvies

CVE-2026-63753

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-20 12:04:44
Laatst bijgewerkt 2026-07-28 01:05:45
Toegewezen door VulnCheck
CVSS-score 5.3
Status PUBLISHED

Beschrijving

SurrealDB before 3.1.0 fails to refresh authentication state in LIVE SELECT subscriptions when session state changes. Attackers can continue receiving real-time notifications under revoked or expired session credentials until the connection closes.