Vendors / orneryd Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now orneryd records in CISA KEV No orneryd vulnerabilities are listed in CISA KEV.
Priority MEDIUM 64
NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00443 · Published 2026-10-11 · No fix listed CWE-862
Priority MEDIUM 49
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0044 · Published 2026-05-08 · Fixed in 1.0.42-hotfix CWE-1392
Open these records in search → All records by CVSS severity
Critical1 High1 Medium0 Low0 No CVSS0