Security Advisory

CVE-2026-63753

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-20 12:04:44

Last updated 2026-07-23 18:56:27

Assigner VulnCheck

CVSS score 5.3

State PUBLISHED

Description

SurrealDB before 3.1.0 fails to refresh authentication state in LIVE SELECT subscriptions when session state changes. Attackers can continue receiving real-time notifications under revoked or expired session credentials until the connection closes.

← Browse all CVEs View on cve.org ↗