Read the docs

Hedera

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hedera records in CISA KEV

No Hedera vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Guardian 2 records MEDIUM

Records

2 records

TI-2026-28783 CVE-2026-39911 · GHSA-wf7f-q2xr-hrmh

Hashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE

Priority MEDIUM 40

Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker that allows authenticated Standard Registry users to e…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00554 Published 2026-04-09 Fixed CWE-668
TI-2026-33055 CVE-2026-45248 · GHSA-5v4v-3g9q-mh5j

Hedera Guardian Authentication Bypass Information Disclosure

Priority LOW 36

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00356 Published 2026-05-14 No fix listed CWE-306
Open these records in search →