Log in Start free

shellhub-io

Products

ProductCVEsExploitedLatest
shellhub4–May 13, 2026

Exploited and recent CVEs

  • CVE-2026-44423 Medium 6.5 ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data 0.2%
  • CVE-2026-44424 Medium 6.5 ShellHub: Cross-tenant IDOR in `GET /api/devices/:uid` discloses device data of any namespace 0.2%
  • CVE-2026-44426 Medium 6.5 ShellHub: Cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check 0.3%
  • CVE-2026-44425 Medium 5.4 ShellHub: Crash-DoS via field injection in filter and sort-by parameters 0.3%