CVE Explorer
CVE-2026-42072
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its defaul
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"NornicDB","vendor":"orneryd","versions":[{"status":"affected","version":"< 1.0.42-hotfix"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:63e8039ecbf131a1cff6a6b9ced56a2aaf3c97e3021652443b28e240b11974e9 · sha256:16f416ea0f247b20… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:63e8039ecbf131a1cff6a6b9ced56a2aaf3c97e3021652443b28e240b11974e9 · sha256:16f416ea0f247b20… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-1392","description":"CWE-1392: Use of Default Credentials","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:63e8039ecbf131a1cff6a6b9ced56a2aaf3c97e3021652443b28e240b11974e9 · sha256:16f416ea0f247b20… · /containers/cna/problemTypes/0/descriptions/0
Source references
3 source assertions{"name":"https://github.com/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca","tags":["x_refsource_MISC"],"url":"https://github.com/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:63e8039ecbf131a1cff6a6b9ced56a2aaf3c97e3021652443b28e240b11974e9 · sha256:16f416ea0f247b20… · /containers/cna/references/1
{"name":"https://github.com/orneryd/NornicDB/releases/tag/v1.0.42","tags":["x_refsource_MISC"],"url":"https://github.com/orneryd/NornicDB/releases/tag/v1.0.42"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:63e8039ecbf131a1cff6a6b9ced56a2aaf3c97e3021652443b28e240b11974e9 · sha256:16f416ea0f247b20… · /containers/cna/references/2
{"name":"https://github.com/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54","tags":["x_refsource_CONFIRM"],"url":"https://github.com/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:63e8039ecbf131a1cff6a6b9ced56a2aaf3c97e3021652443b28e240b11974e9 · sha256:16f416ea0f247b20… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.