Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its default admin:password credentials — to any device sharing the network. This issue has been patched in version 1.0.42-hotfix.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | Patch1 |
| 2026-05-13 | 5 | Disclosure2General3 |
References CVE: CVE-2026-42072 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The brief notice identifies CVE‑2026‑42072 as a critical vulnerability but provides no further technical detail, exploitation evidence, or mitigation guidance.
CVE: CVE-2026-42072 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes.
Post summary
A critical advisory for CVE-2026-42072 is issued with CVSS 9.8, but no exploitation details, PoC, or patch information are provided.
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-42072 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The text announces CVE‑2026‑42072 as a critical vulnerability, providing its CVSS score, vector, and severity details.
CRITICAL: CVE-2026-42072 (CVSS 9.8) — multiple products. CVE: CVE-2026-42072 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post lists the CVE’s critical severity and CVSS score but otherwise provides no details on PoC, exploit, or mitigation.
https://lyrie.ai/research/research/cve-2026-42072-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The excerpt only references a URL pointing to a CVE-2026-42072 advisory, providing no explicit detail on PoC, exploits, patches, or technical specifics.
CVE-2026-42072 Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --add… https://www.cve.org/CVERecord?id=CVE-2026-42072
Post summary
The tweet references a CVE affecting Nornicdb that is apparently addressed by a hotfix in version 1.0.42; no proof of concept, exploit, or active exploitation details are provided.