Security Advisory

CVE-2026-47382

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-23 20:19:39

Last updated 2026-06-24 13:15:48

Assigner GitHub_M

CVSS score 5.3

State PUBLISHED

Description

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the connection-test endpoint opened a raw TCP socket to the user-supplied database host without resolving and range-checking the destination, so private and link-local addresses (including IPv4-mapped IPv6 forms and localhost) reached the driver. This vulnerability is fixed in 2026.05.1.

← Browse all CVEs View on cve.org ↗