{
  "id": 18276619,
  "title": "701 NocoDB fingerprints and 365 titles leave version risk unresolved",
  "url": "https://urgent.news/2026/11/05/701-nocodb-fingerprints-and-365-titles-leave-version-risk-unresolved",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-05T08:40:29.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/sorrelthorncroft/701-nocodb-fingerprints-and-365-titles-leave-version-risk-unresolved-4dai"
  },
  "original_language": "en",
  "account": "On November 4, 2026, ZoomEye discovered 701 NocoDB fingerprints and 365 NocoDB titles across the indexed internet. While the discovery of these instances does not reveal specific versions, it does highlight the application's presence in various configurations. Notably, a vulnerability, CVE-2026-121736, affects NocoDB versions prior to 2026.08.0 and could potentially expose sensitive OAuth data. However, determining which instances pose a risk to an organization requires further investigation beyond the simple count of instances. Security teams should prioritize reviewing the OAuth configuration, checking data boundaries, and testing unauthenticated requests to confirm the presence of vulnerabilities. This discovery underscores the importance of comprehensive configuration management in addition to external internet scanning tools like ZoomEye.",
  "summary": "701 NocoDB fingerprints and 365 titles leave version risk unresolved NocoDB is a self-hosted data platform with APIs, sharing features, and OAuth support. A ZoomEye query for app=\"NocoDB\" returned 701 matches on November 4, 2026. The title query for NocoDB returned 365. The useful fact is not that 701 instances are vulnerable to CVE-2026-121736. It is that the two evidence paths disagree and…",
  "key_points": [
    "ZoomEye discovered 701 NocoDB fingerprints and 365 titles online",
    "CVE-2026-121736 affects NocoDB versions before 2026.08.0",
    "Security teams should review OAuth config and test unauthenticated requests"
  ],
  "editors_take": "The widespread presence of NocoDB instances across the internet forces security teams to move beyond simple scanning toward rigorous configuration audits to prevent potential OAuth data exposure.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}