Get-hermes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Get-hermes records in CISA KEV

No Get-hermes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hermes Web Ui 1 record LOW

Records

1 record in Hermes Web Ui · all components

TI-2026-05993 CVE-2026-6832 · GHSA-pwfc-qm9r-p6h4

Nesquena Hermes WebUI Arbitrary File Deletion via Unvalidated session_id

LOW 34

Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the session directory by supplying an absolute path or path t…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00475 Published 2026-04-21 Fixed in PR #409 CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0