CVE-2026-63736 | SurrealDB up to 3.1.9 JWKS Fetcher server-side request forgery

July 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in SurrealDB up to 3.1.9. This vulnerability affects unknown code of the component JWKS Fetcher. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-63736. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More