{"vulnerability": "cve-2026-6373", "sightings": [{"uuid": "83333e83-1987-454d-9140-f879796d24ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3ffzotfz2x", "content": "CVE-2026-63735 - SurrealDB before 3.2.0 Authentication Bypass via Custom API\nCVE ID : CVE-2026-63735\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API ro...", "creation_timestamp": "2026-07-20T13:25:46.054533Z"}, {"uuid": "a133e9a0-d074-4bb0-a4c4-1a18febc6564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fpfnebr2e", "content": "CVE-2026-63739 - SurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER\nCVE ID : CVE-2026-63739\n \n Published : July 20, 2026, 12:19 p.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER...", "creation_timestamp": "2026-07-20T13:31:00.238504Z"}, {"uuid": "bc3900ee-b54a-4edd-a917-41c92e523d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23", "content": "\ud83d\udfe0 CVE-2026-63731 - High (7.7)\n\nHyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authentica...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63731/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T20:00:46.645672Z"}, {"uuid": "cfefc08d-f587-42f3-931b-5adce63df6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\n\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:46.389162Z"}, {"uuid": "55ef4062-9578-496b-80ab-580e41f6890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63731", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116956203969941945", "content": "CVE-2026-63731 - SSRF in HyperDX before 2.31.0. Authenticated users can probe internal services and access cloud metadata. CVSS 7.7. No patch available yet. Monitor for updates and restrict network access. #CVE #infosec #HyperDX\nhttps://www.valtersit.com/cve/CVE-2026-63731/", "creation_timestamp": "2026-07-21T05:00:47.698803Z"}, {"uuid": "44aba214-6864-48b8-aee5-629d2c1e8bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63735", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrceyz5wch2s", "content": "\ud83d\udccc CVE-2026-63735 - SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints i... https://www.cyberhub.blog/cves/CVE-2026-63735", "creation_timestamp": "2026-07-23T08:07:08.245498Z"}, {"uuid": "e7730340-f1f2-44f7-8a33-024bd19c43de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63739", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrcgomyp6o2s", "content": "\ud83d\udccc CVE-2026-63739 - SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OW... https://www.cyberhub.blog/cves/CVE-2026-63739", "creation_timestamp": "2026-07-23T08:37:06.715154Z"}, {"uuid": "160efd03-c7e4-49f7-86fc-22e85a767dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdurt2jik2k", "content": "CVE-2026-63732 - 9router\nThe 9router software has a default password that can be used by attackers to access the system. This allows them to run malicious code on the host operating system. Update to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#9router #decolua #CVE #infosec", "creation_timestamp": "2026-07-23T22:22:06.103191Z"}, {"uuid": "526edb73-65b7-4918-9b65-6e6b05a5a3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63732", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwwpvlti2c", "content": "\ud83d\udd34 CVE-2026-63732 - Critical (9.9)\n\n9router 0.4.59 (fixed in 0.4.60) contains a chain of vulnerabilities: a hardcoded default passwor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63732/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:00:37.952148Z"}]}