CVE-2026-63757

SurrealDB versions before 3.1.0 contain a session hijacking vulnerability where the HTTP /rpc sessions method returns attached session UUIDs without authentication and accepts arbitrary session fields with no ownership verification. Unauthenticated attackers can enumerate session UUIDs and...

CVE-2026-63757: Missing Authentication for Critical Function

SurrealDB versions before 3.1.0 contain a session hijacking vulnerability where the HTTP /rpc sessions method returns attached session UUIDs without authentication and accepts arbitrary session fields with no ownership verification. Unauthenticated attackers can enumerate session UUIDs and...

CVE-2010-0599

CVE-2010-0599 affects Cisco Network Building Mediator (NBM) families: Mediator Framework on NBM-2400/4800 and Richards-Zeta Mediator 2500. Root cause: XML-RPC sessions from operator workstations were not encrypted, enabling remote attackers to sniff credentials (admin credentials). Impact: unauth...