CVE-2026-126271 NocoDB before 2026.09.0 TLS Private Key Exposure via Data Source Read

NocoDB before 2026.09.0 contains an information disclosure vulnerability that allows authenticated base Viewers to obtain TLS client private keys by reading a base's data source. The source read handler masked only the connection password, letting attackers retrieve the decrypted private key,...

CVE-2026-126271 NocoDB before 2026.09.0 TLS Private Key Exposure via Data Source Read

NocoDB before 2026.09.0 contains an information disclosure vulnerability that allows authenticated base Viewers to obtain TLS client private keys by reading a base's data source. The source read handler masked only the connection password, letting attackers retrieve the decrypted private key,...

CVE-2026-126271

NocoDB versions before 2026.09.0 are vulnerable to an information disclosure flaw where authenticated base Viewers can obtain TLS client private keys by reading a base's data source. The root cause is that the source read handler only masks the connection password, leaving the decrypted private k...

Grafana -- Grafana DS proxy race condition

Grafana Labs reports: We have discovered a vulnerability with Grafana’s data source query endpoints that could end up crashing a Grafana instance. If you have public dashboards PD enabled, we are scoring this as a CVSS 7.5 High. If you have disabled PD, this vulnerability is still a risk, but...