Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Hedera Component: Guardian Clear all filters
TI-2026-33055 CVE-2026-45248 · GHSA-5v4v-3g9q-mh5j

Hedera Guardian Authentication Bypass Information Disclosure

Priority LOW 36

Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET /api/v1/demo/registered-users endpoint that allows unauthenticated attackers to retrieve sensitive user information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00356 Published 2026-05-14 No fix listed CWE-306
TI-2026-28783 CVE-2026-39911 · GHSA-wf7f-q2xr-hrmh

Hashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE

Priority MEDIUM 40

Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker that allows authenticated Standard Registry users to e…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00554 Published 2026-04-09 Fixed CWE-668