N
Vendor security profile
nesquena
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit3
Patch rate%100
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
4
0
0
0
0
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%75
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.9
CVE-2026-55205
Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow Endpoint
N
Patch verifiedEPSS %1
7.1
CVE-2026-55198
Hermes WebUI < 0.51.443 - Cross-Profile Session Data Exfiltration via Session Export Endpoint
N
Patch verifiedEPSS %0
7.1
CVE-2026-55197
Hermes WebUI < 0.51.443 - Broken Access Control in /api/session Endpoint
N
Patch verifiedEPSS %0
8.6
CVE-2026-53871
Hermes WebUI < 0.51.368 - Profile-Scoped Authorization Bypass via Forged hermes_profile Cookie
N
Patch verifiedEPSS %1