CVE-2026-28358 Scanner
CVE-2026-28358 Scanner - User Enumeration vulnerability in NocoDB
Used 3k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-28358
2.7
CVSSlow
Exploitable remotely over the internet · no authentication required.
Description
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, the password forgot endpoint returned different responses for registered and unregistered emails, allowing user enumeration. This issue has been patched in version 0.301.3.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
nocodb
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: nocodb
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →