CVE-2026-6411Disclosure

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from any tenant. Due to the presence of a hardcoded AES key within the application, the encrypted data can be decrypted, enabling access to tenant email addresses and associated information in cleartext. Furthermore, an attacker may be able to cause a denial-of-service condition by enrolling multiple unauthorized devices into a tenant via MQTT, potentially disrupting tenant operations.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-327

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-05-08); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

CVE@CVEnew151d
Disclosure
CVE-2026-6411 This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related met… https://www.cve.org/CVERecord?id=CVE-2026-6411
Post summary
The post briefly announces CVE-2026-6411, noting that versions of the MAXHUB Pivot client before v1.36.2 may disclose encrypted tenant email addresses and metadata. No PoC, exploit, patch, or evidence of active use is provided.
00020201
57.8K followersView on X
Mr.M@cybermrm151d
Disclosure
Según CISA, CVE-2026-6411 afecta MAXHUB Pivot client < v1.36.2: una llave AES hardcodeada permite descifrar correos de tenants y metadatos; también puede causar DoS vía enrolamiento MQTT no autorizado. CVSS 7.3.
Post summary
CISA reports that CVE-2026‑6411 in MAXHUB Pivot client versions <1.36.2 involves a hard‑coded AES key, allowing decryption of tenant emails and metadata, and can also lead to DoS through unauthorized MQTT enrollment, with a CVSS score of 7.3.
0000047
7 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds154d
Disclosure
CVE-2026-6411 Information Disclosure and Denial of Service in MAXHUB Pivot Client Versi... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6411 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The text announces CVE-2026-6411, noting information disclosure and denial‑of‑service issues in MAXHUB Pivot Client, and directs readers to vulnerability details and alerts.
0000064
4.0K followersView on X

Explore more

Back to dashboard