Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 03 Nov 2026 22:44:12 +0000 CVE-2026-90800 — Apache CouchDB: Auth bypass in prefixed _users and _replicator databases https://db.gcve.eu/vuln/cve-2026-90800 <p><strong>Affected:</strong> Apache Software Foundation Apache CouchDB</p> <p>Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed _user or _replicator database via an unauthorised API endpoint.</p> <p>The use of prefixed system databases is very rare.</p> <p>Users are recommended to upgrade to version 3.5.3, which fixes this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache CouchDB</p> <p>Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed _user or _replicator database via an unauthorised API endpoint.</p> <p>The use of prefixed system databases is very rare.</p> <p>Users are recommended to upgrade to version 3.5.3, which fixes this issue.</p> https://db.gcve.eu/vuln/cve-2026-90800