S
Vendor security profile
surrealdb
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs67
Critical1
CISA KEV0
Public exploit0
Patch rate%7
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
55
0
1
11
CVE KEV
CVE severity distribution
67toplam CVE
Critical1 (1%)
High26 (39%)
Medium39 (58%)
Low1 (1%)
Patch and exploitation view
%7
Verified patch
%0
CISA KEV
%0
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
62Unknown
Latest vulnerabilities
8.6
CVE-2026-109343
SurrealDB before 3.3.0 Cross-Tenant Access via USE Statement
S
Patch status unknown
5.3
CVE-2026-109342
SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC Method
S
Patch status unknown
7.1
CVE-2026-109341
SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations
S
Patch status unknown
5.3
CVE-2026-109340
SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADE
S
Patch status unknown
6.9
CVE-2026-109339
SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Buffering
S
Patch status unknown
7.1
CVE-2026-109338
SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values
S
Patch status unknown
5.3
CVE-2026-109337
SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clause
S
Patch status unknown
5.3
CVE-2026-109336
SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$after
S
Patch status unknown
7.1
CVE-2026-109335
SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields
S
Patch status unknown
8.6
CVE-2026-109334
SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC use
S
Patch status unknown