Skip to content

CVE-2026-126280

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 14, 2026
Last Seen
November 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-126280 in NocoDB Allows Refresh Token Reuse78.0

NocoDB versions prior to 2026.08.0 contain a vulnerability (CVE-2026-126280) that allows attackers to exploit a race condition in refresh-token rotation. This flaw enables the reuse of captured refresh tokens, allowing unauthorized access to user sessions without detection. The vulnerability affects...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details