CVE-2026-53870Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard

0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 1 mentions (2026-06-17); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-17	1	Disclosure1
2026-06-18	1	General1

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds92d
General
CVE-2026-53870 Insecure File Permissions in Hermes Agent Before 0.16.0 Expose Se... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53870 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A brief alert about insecure file permissions in Hermes Agent (before 0.16.0). No exploit details, patch info, or reports of active attacks are provided.
0000058
4.1K followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-53870 Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HM… https://www.cve.org/CVERecord?id=CVE-2026-53870
Post summary
The text announces that Hermes Agent versions before 0.16.0 create world‑readable files, thereby exposing conversation history.
00000182
57.6K followersView on X

Explore more

Back to dashboard