https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-03T17:50:34.159118+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-90800 CVE-2026-90800 — Apache CouchDB: Auth bypass in prefixed _users and _replicator databases 2026-11-03T17:50:34.160552+00:00

Affected: Apache Software Foundation Apache CouchDB

Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed _user or _replicator database via an unauthorised API endpoint.

The use of prefixed system databases is very rare.

Users are recommended to upgrade to version 3.5.3, which fixes this issue.