CVE-2026-63752

SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without UPDATE permission. Attackers can issue a RELATE statement with a SET id clause pointing to an existing ed...

EUVD-2026-45923

SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without UPDATE permission. Attackers can issue a RELATE statement with a SET id clause pointing to an existing ed...

CVE-2026-63751

SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use UPDATE PATCH with an empty from pointer in copy or move operations to duplicate all record fields, including...

CVE-2026-63746

SurrealDB is affected in versions before 3.1.0 where SELECT permissions are not enforced during graph traversal and traversal of back-references. The root cause is failure to apply PERMISSIONS FOR select on target tables when navigating graph edges, allowing authenticated users to read records fr...

CVE-2026-63745 SurrealDB before 3.1.0 Authorization Bypass via Composite Record-id

SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability where authenticated users can spoof composite record-id field values by writing to editable body fields. Attackers can bypass permission rules that gate access on id components like tenant isolation by setting same-name...

CVE-2026-63743

SurrealDB prior to 3.1.0 contains a capability bypass in HTTP redirect handling that enables an authenticated user to circumvent port-scoped --deny-net rules. An attacker can chain an HTTP redirect from an allowed hostname to a denied host:port combination, and the redirect is followed because po...

EUVD-2026-45914

SurrealDB before 3.1.0 contains a capability bypass vulnerability in HTTP redirect handling that allows authenticated users to circumvent port-scoped --deny-net rules. Attackers can chain an HTTP redirect from an allowed hostname to a denied host:port combination, and the redirect is followed...

CVE-2026-63737

CVE-2026-63737 affects SurrealDB versions before 3.1.5. Authenticated users can trigger a denial-of-service by submitting queries with extremely long chains of operators, which create unbounded expression trees and cause a stack overflow during query processing, aborting the server. The vulnerabi...

CVE-2026-63737

SurrealDB versions before 3.1.5 contain a denial of service vulnerability where authenticated users can crash the server with queries containing long chains of operators. Attackers can submit queries with tens of thousands of chained operators that create unbounded expression trees, causing stack...

EUVD-2026-45908

SurrealDB versions before 3.1.5 contain a denial of service vulnerability where authenticated users can crash the server with queries containing long chains of operators. Attackers can submit queries with tens of thousands of chained operators that create unbounded expression trees, causing stack...

CVE-2026-63737 SurrealDB before 3.1.5 Denial of Service via deep operator chains

SurrealDB versions before 3.1.5 contain a denial of service vulnerability where authenticated users can crash the server with queries containing long chains of operators. Attackers can submit queries with tens of thousands of chained operators that create unbounded expression trees, causing stack...

EUVD-2026-45906

SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints in different namespaces/databases. Attackers with valid credentials for any namespace/database can access custom API endpoints in other tenants by...

Path Traversal

phpMyFAQ is vulnerable to Path Traversal. The vulnerability is due to improper path validation during PDF generation, where attacker-controlled image paths are passed to filegetcontents without canonicalization or directory containment checks, allowing authenticated users to read files outside th...

CVE-2026-8825

The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoints, allowing authenticated users with Contributor-level access and above to retrieve the title, body and metadata of private posts, privat...

EUVD-2026-45892

The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoints, allowing authenticated users with Contributor-level access and above to retrieve the title, body and metadata of private posts, privat...

PT-2026-61553

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.5 Description Authenticated users can cause a denial of service by submitting queries containing long chains of operators. This occurs when tens of thousands of chained operators create unbounded expression tree...

PT-2026-61559

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.0 Description An issue in HTTP redirect handling allows authenticated users to bypass capability restrictions. Specifically, attackers can circumvent port-scoped --deny-net rules by chaining an HTTP redirect fro...

PT-2026-61605

Name of the Vulnerable Software and Affected Versions FileBrowser Quantum versions prior to 1.4.3-beta Description The subtitlesHandler endpoint GET /api/media/subtitles contains path traversal flaws due to insufficient sanitization of the path and name query parameters. The path parameter is...

PT-2026-61574

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.0 Description An authorization bypass exists in the KILL statement that allows authenticated database users to terminate LIVE SELECT subscriptions belonging to other users. This occurs because the system fails t...

Linux Distros Unpatched Vulnerability : CVE-2026-63091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated...