Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

nesquena — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting nesquena. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page provides a comprehensive aggregation of vulnerabilities associated with nesquena, focusing on software weakness classifications and product-specific security issues. It collects data on various types of security flaws, including injection attacks, cross-site scripting, and broken access control mechanisms, covering vulnerability disclosures from 2020 to 2025. By examining this resource, users can track nesquena’s security advisories over time, understand the prevalence and characteristics of specific weakness classes within this vendor’s ecosystem, and look up the detailed vulnerability history of its products to assess risk exposure. The information is organized to facilitate efficient analysis for security professionals, developers, and auditors seeking to evaluate the security posture of nesquena-related software components. This aggregation serves as a centralized reference for identifying patterns in vulnerability reporting, understanding the impact of known weaknesses, and supporting informed decision-making regarding software procurement, updates, and remediation strategies. Data sources include public vulnerability databases, vendor advisories, and security research publications, ensuring a holistic view of the security landscape surrounding nesquena technologies.

Top products by nesquena: hermes-webui Hermes WebUI
CVE ID Title CVSS Severity Published
CVE-2026-58122 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing — hermes-webui CWE-348 9.1 Critical 2026-07-09
CVE-2026-58123 Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API — hermes-webui CWE-306 9.8 Critical 2026-07-09
CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import — hermes-webui CWE-732 6.5 Medium 2026-06-30
CVE-2026-55205 Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow Endpoint — hermes-webui CWE-770 5.3 Medium 2026-06-18
CVE-2026-55198 Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint — hermes-webui CWE-639 6.5 Medium 2026-06-17
CVE-2026-55197 Hermes WebUI < 0.51.443 - Broken Access Control in /api/session Endpoint — hermes-webui CWE-639 6.5 Medium 2026-06-17
CVE-2026-53871 Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie — hermes-webui CWE-565 8.1 High 2026-06-17
CVE-2026-49973 Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings — hermes-webui CWE-306 9.4 Critical 2026-06-11
CVE-2026-49959 Hermes WebUI < 0.51.311 RCE via Git Configuration Injection — hermes-webui CWE-78 8.8 High 2026-06-09
CVE-2026-49958 Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard — hermes-webui CWE-367 5.0 Medium 2026-06-09
CVE-2026-49957 Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py — hermes-webui CWE-22 7.7 High 2026-06-09
CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search — hermes-webui CWE-862 6.5 Medium 2026-06-09
CVE-2026-49955 Hermes WebUI < 0.51.270 Resource Exhaustion via passkey/options — hermes-webui CWE-770 5.3 Medium 2026-06-09
CVE-2026-11322 Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass — Hermes WebUI CWE-59 6.5 Medium 2026-06-04
CVE-2026-22677 Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint — hermes-webui CWE-22 6.5 Medium 2026-05-13
CVE-2026-6832 Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id — hermes-webui CWE-22 8.1 High 2026-04-21
CVE-2026-6830 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch — hermes-webui CWE-668 3.3 Low 2026-04-21
CVE-2026-6829 nesquena hermes-webui Arbitrary Workspace Directory Access — hermes-webui CWE-22 6.3 Medium 2026-04-21

This page lists every published CVE security advisory associated with nesquena. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.