nerves-hub

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

nerves-hub records in CISA KEV

No nerves-hub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nerveshub 2 records MEDIUM

Records

2 records

TI-2025-39548 CVE-2025-64097

NervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute Force

MEDIUM 49

NervesHub is a web service that allows users to manage over-the-air (OTA) firmware updates of devices in the field.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00468 Published 2026-01-22 Fixed in 2.3.0 CWE-330

TI-2026-23000 CVE-2026-28806

Improper authorization in device bulk actions and device update API allows cross-organization device control

MEDIUM 43

Improper Authorization vulnerability in nerves-hub nerves_hub_web allows cross-organization device control via device bulk actions and device update API.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00452 Published 2026-03-10 Fixed in 2.4.0 CWE-285

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0