EUVD-2026-37904

Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerability in the unauthenticated POST /api/onboarding/oauth/start endpoint that allows unbounded accumulation of in-memory flow state and daemon threads. Attackers can send repeated or concurrent requests to exhaust server memory and...

MINI-M39P-343C-MC65

Bulletin has no description...

MINI-WR78-V5PP-PQ56

Bulletin has no description...

MINI-R332-PR3F-PXFQ

Bulletin has no description...

MINI-F8P7-CW36-8HXX

Bulletin has no description...

MINI-736M-RM22-42R2

Bulletin has no description...

MINI-HPX5-FC57-XQ5M

Bulletin has no description...

MINI-P863-67R3-VFPC

Bulletin has no description...

MINI-38MR-CPCQ-R2WG

Bulletin has no description...

MINI-PGX2-W87J-2XW7

Bulletin has no description...

MINI-HX7X-C28P-53XW

Bulletin has no description...

MINI-84GR-7QVX-695C

Bulletin has no description...

MINI-QC5W-V4FW-V5QX

Bulletin has no description...

MINI-VC69-4738-GHM2

Bulletin has no description...

MINI-574V-MP8V-VHX4

Bulletin has no description...

MINI-W5HX-CP53-3WH5

Bulletin has no description...

MINI-W84V-473G-WPJR

Bulletin has no description...

MINI-RGG3-P5HC-42WX

Bulletin has no description...

MINI-X8Q5-8M3X-3W5J

Bulletin has no description...

MINI-2RPH-826P-6PM8

Bulletin has no description...