CVE ID :CVE-2026-102876 Published : Sept. 29, 2026, 8:01 p.m. | 14 minutes ago Description :SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB headers but constructs sessions...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-102876 - SurrealDB before 3.3.0 Cross-Tenant Access via Headers

VERWANDTEARTIKEL

CVE-2026-103591 - DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

CVE-2026-101283 - iperf3 Heap Buffer Overflow

CVE-2026-51570 - ModelScope AgentScope Path Traversal Vulnerability

CVE-2026-102997 - pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

CVE-2026-102998 - pypdf: Possible long runtimes when generating appearance streams

CVE-2026-102999 - pypdf: Possible long runtimes with large amount of embedded files