CVE-2026-116122

A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in Endpoint. Performing a manipulation of the argument salt results in information disclosure. It is possible to initiate the attack remotely. The attack's...

CVE-2026-116122

NocoDB versions up to 2026.07.0 are vulnerable to an information disclosure flaw in the Sign-in Endpoint . The vulnerability exists within the AuthService.validateUser function, where manipulating the salt argument leads to the exposure of sensitive information. The attack can be initiated remote...

EUVD-2026-109615

A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in Endpoint. Performing a manipulation of the argument salt results in information disclosure. It is possible to initiate the attack remotely. The attack's...