CVE-2026-101050Proof of concept (PoC) published · CISA
Heym before 0.0.53 Authentication Bypass via Telegram Webhook
CVSS score
8.3
EPSS probability
%0.3
Risk score
0.0
Published
15 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
5.3
CVE-2026-109362
Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens
H
Patch status unknown
8.7
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engine
H
Patch status unknownEPSS %1
8.7
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
H
Patch verifiedEPSS %0
8.3
CVE-2026-101049
Heym before 0.0.53 Slack Webhook Signature Verification Bypass
H
Patch verifiedEPSS %0
7.6
CVE-2026-100858
heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes
H
Patch status unknownEPSS %0
5.3
CVE-2026-84207
Heym before 0.0.98 SSRF via WebSocket endpoints
H
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-101050"