Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the connection-test endpoint opened a raw TCP socket to the user-supplied database host without resolving and range-checking the destination, so private and link-local addresses (including IPv4-mapped IPv6 forms and localhost) reached the driver. This vulnerability is fixed in 2026.05.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-23 | 2 | Disclosure1Patch1 |
| 2026-06-24 | 1 | Disclosure1 |
CVE-2026-47382 Server-Side Request Forgery in NocoDB Prior to Version 2026.05.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-47382
Post summary
The CVE‑2026‑47382 entry describes a server‑side request forgery flaw affecting NocoDB before version 2026.05.1 and links to a vulnerability details page, with no mention of PoC, exploits, or patches.
🚨*CVE* CVE-2026-47382 NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the connection-test endpoint opened a raw TCP socket to the user-supplied database host… https://www.cve.org/CVERecord?id=CVE-2026-47382 ----- Traducción: CVE-2026-47382 Noc… http://infoflow.cloud`
Post summary
The post announces CVE-2026-47382 for NocoDB, detailing that pre‑2026.05.1 the connection‑test endpoint opens a raw TCP socket to a user‑supplied host, but offers no patch, exploit, or PoC information.
CVE-2026-47382 NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, the connection-test endpoint opened a raw TCP socket to the user-supplied database host… https://www.cve.org/CVERecord?id=CVE-2026-47382
Post summary
The post discloses a NocoDB vulnerability involving an open TCP socket to a user-supplied host, and indicates that the issue was fixed in release 2026.05.1.