hermes-webui

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

hermes-webui records in CISA KEV

No hermes-webui vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-39876 CVE-2026-55196 · GHSA-5j37-rf54-82q2

Hermes WebUI < 0.51.409 - Unauthenticated Passkey Registration via Authentication Bypass

MEDIUM 48

Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey registration endpoints that allows unauthenticated remote attackers to register arbitrary passkeys.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00579 Published 2026-06-17 Fixed in 0.51.409 CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0