Skip to content
OpenAdvisories

Vendor

orneryd

2 known vulnerabilities.

Products

NornicDB 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-108710

    NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints

    NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied rea…

    orneryd NornicDB