https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:46:15.306118+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341476 EUVD-2026-341476 2026-10-07T01:46:15.363299+00:00 EUVD-2026-341476 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63741 fkie_cve-2026-63741 2026-10-07T01:46:15.363339+00:00

SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create arbitrary namespaces and databases by issuing USE commands, bypassing authorization checks in the RPC use method and SurrealQL executor.

 https://cve.radiocsirt.org/vuln/ghsa-8p7x-252x-x2h5 GHSA-8p7x-252x-x2h5 2026-10-07T01:46:15.363372+00:00

SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create arbitrary namespaces and databases by issuing USE commands, bypassing authorization checks in the RPC use method and SurrealQL executor.