What is CVE-2026-63754?

CVE-2026-63754 is a medium-severity vulnerability in Surrealdb, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 6.5/10. Published 2026-07-20.

How severe is CVE-2026-63754?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Surrealdb

CVE-2026-63754

SurrealDB versions before 3.1.0 contain a denial of service vulnerability where malicious LIVE queries with WHERE clauses that evaluate to errors cause all CREATE, UPDATE, and DELETE operations on the watched table to fail. An authenticate…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Surrealdb — versions 0, 3.1.0

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-63754?: CVE-2026-63754 is a medium-severity vulnerability in Surrealdb, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 6.5/10. Published 2026-07-20.
How severe is CVE-2026-63754?: Medium severity. CVSS v3 base score is 6.5 out of 10.