CVE-2026-90800 - Apache CouchDB: Auth bypass in prefixed _users and _replicator databases
CVE ID :CVE-2026-90800 Published : Oct. 20, 2026, 3:40 p.m. | 25 minutes ago Description :Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed _user or _replicator database via an unauthorised API...