Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instance and any dependent applications.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-71391 Uncaught Exception Vulnerability in SurrealDB Before 2.2.2 Net Module https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71391
Post summary
The post discloses a new uncaught exception vulnerability in SurrealDB (before v2.2.2), but does not mention PoC, exploit code, active exploitation, patches, or a false‑positive claim.
CVE-2025-71391 SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can sen… https://www.cve.org/CVERecord?id=CVE-2025-71391
Post summary
The post describes a CVE-2025-71391 that causes OS-level crashes through an uncaught exception but provides no evidence of exploitation, proofs, or patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | surrealdb | surrealdb | - | - | - |