CVE-2026-53871Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts unauthenticated profile names from the hermes_profile cookie. An authenticated attacker can forge the hermes_profile cookie value to bypass profile-scoped authorization checks and access sessions, files, and resources across different profiles.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-565

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-06-17); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets2 URLs

By indicator

Full discourse3 posts

Joey Romaine 🇺🇸 |=★=|@Tank23x0113d
Disclosure
CVE-2026-53871 is live. If you run affected systems, read this now. Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function... The best defense is the one you set up before you needed it.
Post summary
The statement announces that CVE-2026-53871, an authorization bypass in Hermes WebUI version pre‑0.51.368, is now live, but it does not provide a PoC, exploit, patch, or evidence of active exploitation.
0000076
339 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds138d
Disclosure
CVE-2026-53871 Authorization Bypass in Hermes WebUI Before 0.51.368 via Cookie Forgery https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53871
Post summary
This entry discloses an authorization bypass in Hermes WebUI (pre‑0.51.368) caused by cookie forgery, with no further details on PoC, exploit, or patch provided.
0000053
4.1K followersView on X
CVE@CVEnew138d
Disclosure
CVE-2026-53871 Hermes WebUI before 0.51.368 contains an authorization bypass vulnerability in the get_profile_cookie() function that accepts unauthenticated profile names from the h… https://www.cve.org/CVERecord?id=CVE-2026-53871
Post summary
Hermes WebUI before 0.51.368 contains an authorization bypass flaw in get_profile_cookie() that allows unauthenticated access; no PoC, exploit, active attacks, patch, or debunking claims are mentioned.
00000158
57.6K followersView on X

Explore more

Back to dashboard