Lucene search
K

CVE-2026-6832 Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id

πŸ—“οΈΒ 21 Apr 2026Β 21:44:55Reported byΒ VulnCheckTypeΒ 
cvelist
Β cvelist
πŸ”—Β www.cve.orgπŸ‘Β 30Β Views

Arbitrary file deletion in Hermes WebUI via path traversal in session_id.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-6832
21 Apr 202621:44
–attackerkb
Circl
CVE-2026-6832
21 Apr 202622:37
–circl
CNNVD
Hermes Web UI θ·―εΎ„ιεŽ†ζΌζ΄ž
21 Apr 202600:00
–cnnvd
CVE
CVE-2026-6832
21 Apr 202621:44
–cve
EUVD
EUVD-2026-24517
22 Apr 202600:31
–euvd
NVD
CVE-2026-6832
21 Apr 202622:16
–nvd
Positive Technologies
PT-2026-34195
21 Apr 202600:00
–ptsecurity
RedhatCVE
CVE-2026-6832
14 May 202602:21
–redhatcve
Vulnrichment
CVE-2026-6832 Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id
21 Apr 202621:44
–vulnrichment
[
  {
    "vendor": "nesquena",
    "product": "hermes-webui",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "PR #409",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation