CVE-2026-121416

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 3, 2026

Last Seen

November 3, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-121416: SurrealDB Deny Funcs Bypass Vulnerability Disclosed63.0

A vulnerability identified as CVE-2026-121416 affects SurrealDB versions 2.0.0 to 3.3.1, allowing authenticated users to bypass method-style function restrictions. This flaw arises from the MethodPart::evaluate function, which fails to enforce capability checks, enabling unauthorized access to sensi...