CVE-2026-63735

creationtimestamp| type| source ---|---|--- 2026-07-20 13:25:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ffzotfz2x...

CVE-2026-63735

SurrealDB is affected: versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing an authenticated user to invoke endpoints in other namespaces/databases by specifying the target scope in the URL path. This could let attackers read sensitive data or trigger...