nullclaw

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

nullclaw records in CISA KEV

No nullclaw vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74110 CVE-2026-110616 · GHSA-jrqq-fxff-7f78

Missing authentication in NullHub exposes management API

HIGH 75

NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field defaults to null and is never assigned.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00952 Published 2026-10-14 No fix listed CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0