🚨 EUVD-2026-97632 📊 5.3/10 🏢 Jovancoding 📝 Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live ag... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97632 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97633 📊 7.5/10 🏢 Jovancoding 📝 Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patt... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97633 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97634 📊 2.3/10 🏢 Jovancoding 📝 Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97634 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97635 📊 7.1/10 🏢 surrealdb 📝 SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users to read records in other namespa... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97635 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97636 📊 8.6/10 🏢 surrealdb 📝 SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user au... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97636 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97637 📊 7.1/10 🏢 surrealdb 📝 SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure vulnerability that allows record users to read values hidden by field-level SELECT ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97637 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97638 📊 5.3/10 🏢 surrealdb 📝 SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions t... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97638 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97639 📊 5.3/10 🏢 surrealdb 📝 SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permis... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97639 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97640 📊 7.1/10 🏢 surrealdb 📝 SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97640 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97641 📊 6.9/10 🏢 surrealdb 📝 SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, byp... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97641 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97642 📊 5.3/10 🏢 surrealdb 📝 SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by trig... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97642 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97643 📊 7.1/10 🏢 surrealdb 📝 SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97643 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97644 📊 5.3/10 🏢 surrealdb 📝 SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-privileged or unauthenticated... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97644 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97645 📊 8.6/10 🏢 surrealdb 📝 SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQL USE statement switches a session to any namespace/database without checking that... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97645 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97646 📊 5.1/10 🏢 cure53 📝 DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vulnerability because IN_PLACE mode fails to neutralize subtrees detached by afterSanit... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97646 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97647 📊 5.1/10 🏢 cure53 📝 DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because IN_PLACE mode returns a force-re... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97647 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97648 📊 8.5/10 🏢 better-auth 📝 better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device om... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97648 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97649 📊 8.6/10 🏢 vrana 📝 Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97649 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97650 📊 5.3/10 🏢 GitoxideLabs 📝 Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97650 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-97651 📊 7.1/10 🏢 GitoxideLabs 📝 gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97651 #cybersecurity #infosec #cve #euvd