Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

surrealdb vulnerabilities and fixes

Exploited and high-severity surrealdb vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.1CVE-2026-121423SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value SerializationFix availablesurrealdb surrealdb
    1 min read
  2. 8.6CVE-2026-121419SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject CollisionFix availablesurrealdb surrealdb
    1 min read
  3. 8.8CVE-2026-121417SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV BackendsFix availablesurrealdb surrealdb
    1 min read
  4. 7.1CVE-2026-121416SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style InvocationsFix availablesurrealdb surrealdb
    1 min read
Esc