CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-49956

CVE-2026-49956 affects the Hermes WebUI prior to version 0.51.269. The root cause is a profile isolation bypass: an authenticated user can query the sessions search endpoint without active-profile filtering, exposing data from other profiles (session titles and transcript message content). This i...

CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-53408

creationtimestamp| type| source ---|---|--- 2026-06-09 15:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnuj5z7rmz2z 2026-06-16 20:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moglyfwgl52x 2026-07-05 03:49:57+00:00| seen|...

CVE-2026-53407

creationtimestamp| type| source ---|---|--- 2026-06-09 15:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnuj5z7rmz2z 2026-06-13 11:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo642nfyqt2l 2026-07-05 03:49:57+00:00| seen|...

CVE-2026-5714

creationtimestamp| type| source ---|---|--- 2026-06-09 14:27:43+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnufr2tffa2t 2026-06-11 10:16:26+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyynlbxdh2f...

CVE-2026-46321

creationtimestamp| type| source ---|---|--- 2026-06-09 13:59:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnue6lbwre2m 2026-07-01 02:34:13+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:23:32+00:00| seen...

CVE-2026-46322

creationtimestamp| type| source ---|---|--- 2026-06-09 13:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnudmntbuw24 2026-07-01 02:34:11+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:23:36+00:00| seen...

CVE-2026-42488

creationtimestamp| type| source ---|---|--- 2026-06-09 13:47:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnudj4gyhs25 2026-06-10 04:24:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-xen...

CVE-2026-42487

creationtimestamp| type| source ---|---|--- 2026-06-09 13:37:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucx6ujgc2i 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

CVE-2026-42489

creationtimestamp| type| source ---|---|--- 2026-06-09 13:32:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucoaa2ss26 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

CVE-2026-42490

creationtimestamp| type| source ---|---|--- 2026-06-09 13:32:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucoaa2ss26 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...

CVE-2017-20250

creationtimestamp| type| source ---|---|--- 2026-06-09 13:17:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnubt4di7t2h...

CVE-2017-20244

creationtimestamp| type| source ---|---|--- 2026-06-09 13:10:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnubgn2hzw2v...

CVE-2017-20243

creationtimestamp| type| source ---|---|--- 2026-06-09 13:08:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnubczrozg2v...

CVE-2026-46324

creationtimestamp| type| source ---|---|--- 2026-06-09 13:04:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnub4iiajl2o...

CVE-2017-20248

creationtimestamp| type| source ---|---|--- 2026-06-09 13:02:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuazhzkb22l...

CVE-2026-46317

creationtimestamp| type| source ---|---|--- 2026-06-09 13:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuaxocwie2e...

CVE-2026-7556

creationtimestamp| type| source ---|---|--- 2026-06-09 12:39:33+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnu7pncyhk2s 2026-06-11 07:16:39+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyoloutkh2w...