PT-2026-45091

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.8 Description An out-of-bounds write can be triggered remotely within the Shared NF-profile Parser component. The issue resides in the handle scp info function located in the lib/sbi/nnrf-handler.c library...

PT-2026-45082

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.8 Description An issue exists in the Shared NF-profile Parser component within the lib/sbi/nnrf-handler.c library. Remote manipulation of an unknown functionality in this library can lead to a denial of service...

CVE-2026-34297

creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:48+00:00| seen| Telegram/DVTWZmGG1qCJe-0IJfQ1HXgYFTwgnUj24suPZSIXyV8Y 2026-04-22 23:31:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4nqwoaf52q...

CVE-2026-34287

creationtimestamp| type| source ---|---|--- 2026-04-21 23:29:42+00:00| seen| Telegram/aMi2LuBEIXJnsV5m6CV4ivBB7xOt9ZZP3DifvdMTwaEDzZM 2026-04-22 23:47:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4onci22e2c 2026-04-23 13:37:08+00:00| seen|...

CVE-2026-41058

creationtimestamp| type| source ---|---|--- 2026-04-21 23:22:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk24rsevuy2q 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

CVE-2026-35229

creationtimestamp| type| source ---|---|--- 2026-04-21 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk23l5hek32c 2026-04-21 23:30:11+00:00| seen| Telegram/14RDzCjaAGLQIuKBJtHoIYde60oDRnqUnuM1SZUlRS4U4fg...

CVE-2026-35246

creationtimestamp| type| source ---|---|--- 2026-04-21 23:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk23kwcjaj2l 2026-04-21 23:30:11+00:00| seen| Telegram/14RDzCjaAGLQIuKBJtHoIYde60oDRnqUnuM1SZUlRS4U4fg 2026-04-22 12:50:28+00:00| seen|...

CVE-2026-40706

creationtimestamp| type| source ---|---|--- 2026-04-21 22:37:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk22bmbeme2q 2026-04-21 23:30:49+00:00| seen| Telegram/WzFh75qC0rKhc-ksOtYvdTuNUy7-5M1wjcl5aTvCRw8jriM 2026-04-22 01:57:55+00:00| seen|...

CVE-2026-6832

creationtimestamp| type| source ---|---|--- 2026-04-21 22:37:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk22bewh6y2z 2026-04-21 22:40:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk22ho3kj22i 2026-04-21 22:53:51+00:00| seen|...

CVE-2026-6830

creationtimestamp| type| source ---|---|--- 2026-04-21 22:29:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjzzsxde2n2h...

CVE-2026-6796

creationtimestamp| type| source ---|---|--- 2026-04-21 22:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjzzhfawbn2k...

CVE-2026-6830

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-35242

creationtimestamp| type| source ---|---|--- 2026-04-21 22:03:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzyf4mwzi2z 2026-04-21 23:30:11+00:00| seen| Telegram/14RDzCjaAGLQIuKBJtHoIYde60oDRnqUnuM1SZUlRS4U4fg 2026-04-22 12:50:28+00:00| seen|...

CVE-2026-35251

creationtimestamp| type| source ---|---|--- 2026-04-21 22:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzyevy2gx2g 2026-04-21 23:30:36+00:00| published-proof-of-concept| Telegram/ITN0hTjNGfPMK-REHkV5qJBsGo4t4-tf1bJT5aod5DHh0UQ 2026-04-22 12:50:29+00:00| seen|...

CVE-2026-40906

creationtimestamp| type| source ---|---|--- 2026-04-21 22:02:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzycgjow32e 2026-04-21 22:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjzz2zz5lr2c 2026-04-21 23:30:36+00:00| published-proof-of-concept|...

CVE-2026-6823

creationtimestamp| type| source ---|---|--- 2026-04-21 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzy7l4kg62k 2026-04-21 22:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk23hxdyzw2i 2026-04-21 23:08:52+00:00| seen|...

CVE-2026-6830

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-6830 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-6830

The CVE concerns nesquena Hermes WebUI, where switching profiles fails to clear environment variables from the previous profile, enabling leakage of sensitive credentials (e.g., provider API keys) between profiles. The underlying issue is residual environment variables that persist across profile...

CVE-2026-6830 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...