Hermes WebUI < 0.51.788 - Remote Code Execution

Hermes WebUI 0.51.788 contains an unauthenticated remote code execution caused by improper access control in embedded terminal API endpoints, letting remote attackers execute arbitrary shell commands without credentials. id: CVE-2026-58123 info: name: Hermes WebUI 0.51.788 - Remote Code Execution...

CVE-2026-58123

creationtimestamp| type| source ---|---|--- 2026-07-09 21:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqamhoqmnr25 2026-07-09 23:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqaqiazrqg2b 2026-07-09 23:19:15+00:00| seen|...