CVE-2026-63735

creationtimestamp| type| source ---|---|--- 2026-07-20 13:25:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ffzotfz2x 2026-07-23 08:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrceyz5wch2s...

CVE-2026-63735

SurrealDB is affected: versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing an authenticated user to invoke endpoints in other namespaces/databases by specifying the target scope in the URL path. This could let attackers read sensitive data or trigger...