← Back to Dashboard

CVE-2026-108710

MEDIUM NVD
CVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Oct 11, 2026
Description

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node IDs to retrieve node IDs, labels and full property maps.

View Full Details ← Back