CVE-2026-47380EPSS p22.1%

CVE-2026-47380CVE-2026-47380

Description

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.

Scoring

EPSS0.31% probability of exploitation · percentile 22.1% · 2026-10-05T12:00:23Z
Last modified2026-06-25
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.