2 matches found
CVE-2026-28806
Improper Authorization vulnerability in nerves-hub nerveshubweb allows cross-organization device control via device bulk actions and device update API. Missing authorization checks in the device bulk actions and device update API endpoints allow authenticated users to target devices belonging to...
9.9CVSS6AI score0.00426EPSS
SaveExploits0References4
CVE-2026-28806: Improper Authorization
Improper Authorization vulnerability in nerves-hub nerveshubweb allows cross-organization device control via device bulk actions and device update API. Missing authorization checks in the device bulk actions and device update API endpoints allow authenticated users to target devices belonging to...
9.4CVSS6AI score0.00426EPSS
SaveExploits0References7
20