nerves-hub
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| nerves_hub_web | 2 | – | Mar 10, 2026 |
Exploited and recent CVEs
- CVE-2026-28806 Improper authorization in device bulk actions and device update API allows cross-organization device control 0.5%
- CVE-2025-64097 NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force 0.5%