{"vulnerability": "CVE-2026-63756", "sightings": [{"uuid": "2440633e-4b3e-4655-9ef7-dcacdfacefaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63756", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3c3c3v752i", "content": "CVE-2026-63756 - surrealdb\nSurrealDB versions before 3.1.0 have a security flaw that allows unauthorized users to access and use the accounts of legitimate users. This can happen when an attacker sends multiple\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#surrealdb #CVE #infosec", "creation_timestamp": "2026-07-20T12:26:04.589342Z"}, {"uuid": "6cd3ed99-c57c-4a78-be71-3845f40a7bf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3g2qsave2o", "content": "CVE-2026-63756 - SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition\nCVE ID : CVE-2026-63756\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condit...", "creation_timestamp": "2026-07-20T13:37:21.263017Z"}, {"uuid": "2b991933-6274-49f3-b9b0-ce5142197f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63756", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrbzbhyi3j2m", "content": "\ud83d\udccc CVE-2026-63756 - SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to i... https://www.cyberhub.blog/cves/CVE-2026-63756", "creation_timestamp": "2026-07-23T04:37:06.564083Z"}]}