NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-47380
Summary

NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, sign-in response timing differed between known and unknown email addresses because the unknown-user branch returned without performing a password hash comparison. This vulnerability is fixed in 2026.04.1.

Publication Date June 24, 2026, 6:16 a.m.
Registration Date June 27, 2026, 4:16 a.m.
Last Update June 25, 2026, 11:21 p.m.
Related information, measures and tools
Common Vulnerabilities List