TI-2026-44169 CVE-2026-61699 · GHSA-cm26-5974-52h8
nebula-mesh: Certificate revocation is never enforced at the mesh
Priority HIGH 70
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
forgekeep
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
forgekeep records in CISA KEVNo forgekeep vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-45231 CVE-2026-63464
Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
Priority HIGH 67
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
TI-2026-40058 CVE-2026-55512 · GHSA-m3cx-mwpg-32jg
nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting
Priority MEDIUM 63
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
TI-2026-40059 CVE-2026-55513 · GHSA-g4x6-jcvr-9m3g
nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens
Priority MEDIUM 58
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
TI-2026-38659 CVE-2026-53603 · GHSA-q4vm-pq3q-8wgq
nebula-mesh: Operator session tokens stored in plaintext in the database
Priority LOW 37
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
TI-2026-38660 CVE-2026-53604 · GHSA-2p2f-px33-4vv5
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
Priority LOW 30
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.
TI-2026-38658 CVE-2026-53602 · GHSA-339v-266x-79xr
nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate
Priority LOW 30
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN.