Description
NocoDB 在 0.301.3 版本之前存在用户名枚举漏洞，攻击者可利用此漏洞获系统账号信息。
NocoDB存在用户名枚举(CVE-2026-28358)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-28358
https://github.com/nocodb/nocodb/security/advisories/GHSA-387m-j3p9-3php
https://www.miggo.io/vulnerability-database/cve/CVE-2026-28358
https://pentest-tools.com/vulnerabilities-exploits/nocodb-user-enumeration_29111
https://www.sentinelone.com/vulnerability-database/cve-2026-28358/
https://advisories.gitlab.com/pkg/npm/nocodb/CVE-2026-28358/
https://www.tenable.com/cve/CVE-2026-28358
https://www.cve.org/CVERecord?id=CVE-2026-28358
https://access.redhat.com/security/cve/cve-2026-28358