CVE Tools
Track your stack

Nesquena

12 CVEs tracked since 2026. Since Jun 2026, none of them reached CISA KEV.

Nesquena CVEs per month

Jun 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Nesquena CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-06120
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Nesquena's monthly top three, with their CVEs summed over those months.

  1. Hermes-webui111 month
  2. Hermes Webui11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Nesquena.

  1. CVE-2026-58122Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing9.1
  2. CVE-2026-58123Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API9.8
  3. CVE-2026-58174Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import6.5
  4. CVE-2026-55205Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow Endpoint5.3
  5. CVE-2026-55198Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint6.5
  6. CVE-2026-55197Hermes WebUI < 0.51.443 - Broken Access Control in /api/session Endpoint6.5
  7. CVE-2026-53871Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie8.1
  8. CVE-2026-49973Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings9.4
  9. CVE-2026-49959Hermes WebUI < 0.51.311 RCE via Git Configuration Injection8.8
  10. CVE-2026-49958Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard5.0
  11. CVE-2026-49957Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py7.7
  12. CVE-2026-49956Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search6.5
  13. CVE-2026-49955Hermes WebUI < 0.51.270 Resource Exhaustion via passkey/options5.3
  14. CVE-2026-11322Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass6.5
  15. CVE-2026-22677Hermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint6.5

The record

Peak rank
#103 in Jun 2026
Busiest month shown
Jun 2026, 12 CVEs
Months with a KEV entry
0 since Jun 2026
Monthly snapshots
1 since 2026
Nesquena's full record, month by month