CVE-2026-53926

NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, revokeAllOAuthTokensByUser in the users service is an empty stub being called from passwordChange, passwordForgot, and passwordReset. OAuth access and refresh tokens were not revoked when the user changed, reset, or recovered their password, leaving an attacker-issued OAuth grant valid after the user believed they had locked the attacker out. This vulnerability is fixed in 2026.05.1.

• CWE-613

• https://github.com/nocodb/nocodb/security/advisories/GHSA-g72g-r7m4-9x4g

Published

Jun 23, 2026

Last Modified

Jun 25, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53915In JetBrains GoLand before 2026.1.3 remote code execution wa…8.8
• CVE-2026-53916Memory Allocation with Excessive Size Value vulnerability in…7.5
• CVE-2026-53917Memory Allocation with Excessive Size Value vulnerability in…7.5
• CVE-2026-5392Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 me…5.4
• CVE-2026-53923vLLM is an inference and serving engine for large language m…7.5
• CVE-2026-53925Glances is an open-source system cross-platform monitoring t…7.8
• CVE-2026-53927NocoDB is software for building databases as spreadsheets. P…5.1
• CVE-2026-53928NocoDB is software for building databases as spreadsheets. P…6.3
• CVE-2026-53929NocoDB is software for building databases as spreadsheets. P…5.1
• CVE-2026-5393Dual-Algorithm CertificateVerify out-of-bounds read. When pr…9.1
• CVE-2026-53930NocoDB is software for building databases as spreadsheets. P…5.1
• CVE-2026-53931NocoDB is software for building databases as spreadsheets. P…6.9