CVE-2026-120997

The nerves_hub nerves_hub_web component (versions 1.0.0 before 2.5.3 ) is vulnerable to Improper Session Invalidation (CWE-1464, CWE-1465). The dashboard, device console, and local shell channels only verify user roles once at page mount or socket join. Consequently, a removed or demoted member c...