CVE-2026-55197Disclosure

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard

0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 1 mentions (2026-06-17); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-17	1	Disclosure1
2026-06-18	1	General1

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds91d
General
CVE-2026-55197 Broken Access Control in Hermes WebUI Before 0.51.443 Ses... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-55197 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet briefly references CVE-2026-55197, indicating a broken access control flaw in Hermes WebUI and linking to a vulnerability details page, but provides no further technical, exploit, or remediation information.
0000058
4.1K followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-55197 Hermes WebUI before 0.51.443 contains a broken access control vulnerability in the /api/session endpoint that allows authenticated users to disclose cross-profile ses… https://www.cve.org/CVERecord?id=CVE-2026-55197
Post summary
The post reports a broken access control flaw in Hermes WebUI versions prior to 0.51.443, enabling authenticated users to see cross‑profile sessions, but it does not mention a PoC, patch, or active exploitation.
00000152
57.6K followersView on X

Explore more

Back to dashboard