CVE-2026-126285 | NocoDB up to 2026.07.0 SQL Query Construction CustomKnex.ts where sql injection

November 13, 2026 Yanac

A vulnerability, which was classified as critical, was found in NocoDB. Affected is an unknown function of the file CustomKnex.ts of the component SQL Query Construction. Executing a manipulation of the argument where can lead to sql injection.

This vulnerability is tracked as CVE-2026-126285. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More