701 NocoDB fingerprints and 365 titles leave version risk unresolved
701 NocoDB fingerprints and 365 titles leave version risk unresolved NocoDB is a self-hosted data platform with APIs, sharing features, and OAuth support. A ZoomEye query for app="NocoDB" returned 701 matches on November 4, 2026. The title query for NocoDB returned 365. The useful fact is not that 701 instances are vulnerable to CVE-2026-121736. It is that the two evidence paths disagree and…
On November 4, 2026, ZoomEye discovered 701 NocoDB fingerprints and 365 NocoDB titles across the indexed internet. While the discovery of these instances does not reveal specific versions, it does highlight the application's presence in various configurations. Notably, a vulnerability, CVE-2026-121736, affects NocoDB versions prior to 2026.08.0 and could potentially expose sensitive OAuth data.
However, determining which instances pose a risk to an organization requires further investigation beyond the simple count of instances. Security teams should prioritize reviewing the OAuth configuration, checking data boundaries, and testing unauthenticated requests to confirm the presence of vulnerabilities. This discovery underscores the importance of comprehensive configuration management in addition to external internet scanning tools like ZoomEye.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
