{"metadata": {"vulnerability": "CVE-2026-42072", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-04-22T22:03:43Z", "date_only": false, "value": "2026-04-22T22:03:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2HP7-65R3-WV54", "record": "GHSA-2HP7-65R3-WV54", "field": "published"}, {"timestamp": "2026-04-23T19:17:30.565Z", "date_only": false, "value": "2026-04-23T19:17:30.565Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-42072", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-08T15:59:42.544Z", "date_only": false, "value": "2026-05-08T15:59:42.544Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42072", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-08T15:59:42.544Z", "date_only": false, "value": "2026-05-08T15:59:42.544Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-42072", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-08T17:16:31Z", "date_only": false, "value": "2026-05-08T17:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2HP7-65R3-WV54", "record": "GHSA-2HP7-65R3-WV54", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-08T17:16:31.447Z", "date_only": false, "value": "2026-05-08T17:16:31.447", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42072", "record": "FKIE_CVE-2026-42072", "field": "published"}, {"timestamp": "2026-05-08T17:22:15.165Z", "date_only": false, "value": "2026-05-08T17:22:15.165295Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlealona2526", "record": "CVE-2026-42072", "field": "creation_timestamp", "uuid": "e67f1c80-dbbd-4319-9805-2b39d18c7319", "content": "\ud83d\udd34 CVE-2026-42072 - Critical (9.8)\n\nNornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, g...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42072/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlealona2526"}, {"timestamp": "2026-05-08T18:34:05.872Z", "date_only": false, "value": "2026-05-08T18:34:05.872931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mleem5x72k2v", "record": "CVE-2026-42072", "field": "creation_timestamp", "uuid": "fa4107f1-a8ce-4b0e-ac36-63cac8372bae", "content": "CVE-2026-42072 - Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access\nCVE ID : CVE-2026-42072\n \n Published : May 8, 2026, 5:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : Nornicdb is a distributed low-latency, Graph+Vector, Temporal MV...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mleem5x72k2v"}, {"timestamp": "2026-05-09T10:30:28.544Z", "date_only": false, "value": "2026-05-09T10:30:28.544883Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116544151733422821", "record": "cve-2026-42072", "field": "creation_timestamp", "uuid": "7fb8de08-be07-492a-ac85-c119f3619aa8", "content": "\u26a0\ufe0f CRITICAL: orneryd NornicDB (<1.0.42-hotfix) exposes Bolt server on all LAN interfaces with default admin creds (admin:password). Full DB compromise possible! Upgrade to 1.0.42-hotfix now. CVE-2026-42072 https://radar.offseq.com/threat/cve-2026-42072-cwe-1392-use-of-default-credentials-cb1c5acf #OffSeq #CVE202642072 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/116544151733422821"}, {"timestamp": "2026-05-09T10:30:30.417Z", "date_only": false, "value": "2026-05-09T10:30:30.417316Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlg22dseio2y", "record": "cve-2026-42072", "field": "creation_timestamp", "uuid": "4cdb49b2-9104-4bc6-a456-b2a7a5222d04", "content": "NornicDB (<1.0.42-hotfix) critical vuln: Bolt server exposed on LAN with default admin creds. Upgrade to 1.0.42-hotfix ASAP to prevent DB compromise! \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-42072-cwe-1392-use-of-default-credentials-cb1c5acf #OffSeq #CVE202642072", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mlg22dseio2y"}, {"timestamp": "2026-05-12T02:03:01.031Z", "date_only": false, "value": "2026-05-12T02:03:01.031136Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42072", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-12T02:03:01.031Z", "date_only": false, "value": "2026-05-12T02:03:01.031136Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42072", "record": "FKIE_CVE-2026-42072", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-12T02:04:18.612Z", "date_only": false, "value": "2026-05-12T02:04:18.612Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-42072", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-12T02:04:18.612Z", "date_only": false, "value": "2026-05-12T02:04:18.612Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42072", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-13T13:30:30Z", "date_only": false, "value": "2026-05-13T13:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2HP7-65R3-WV54", "record": "GHSA-2HP7-65R3-WV54", "field": "modified"}, {"timestamp": "2026-06-17T10:47:23.307Z", "date_only": false, "value": "2026-06-17T10:47:23.307", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42072", "record": "FKIE_CVE-2026-42072", "field": "lastModified"}, {"timestamp": "2026-09-12T10:00:12.564Z", "date_only": false, "value": "2026-09-12T10:00:12.564811Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shimiscyberworld/1312", "record": "CVE-2026-42072", "field": "creation_timestamp", "uuid": "55c6bb8a-1890-4b90-847c-183f319638e5", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-42072 \u2014 CVSS 9.8\nCVE-2026-42072: Nornicdb Exposes Graph Database via Default Credentials on LAN\n\nCVE-2026-42072 \u2014 Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-42072 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1312"}]}