VulnSocial

CVE-2026-8757Disclosure(adenhq / hive)

LOWCVSS 9.1 · CRITICAL

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Prioritize remediation for adenhq hive systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

adenhq CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • hive

Threat summary

  • Active exploitation appears in 1 classified signals
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Disclosure: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-05-18)
  • 3 total mentions across 2 days

Affected systems

Vendors
adenhq
Products
hive

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-17: 1Mentions · 2026-05-18: 2Active Exploitation · 2026-05-18: 105-1705-18
Signal classification2 categories
Disclosure
266.7%
Active Exploitation
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-171
Disclosure1
2026-05-182
Active Exploitation1Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-8757 A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component… https://www.cve.org/CVERecord?id=CVE-2026-8757

    Post summary

    The post announces a newly identified vulnerability (CVE-2026-8757) in adenhq hive up to 0.11.0, specifying the affected function, but offers no further technical details, PoC, exploitation evidence, or patches.

    00010213
    57.5K followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    Some increased actor activities are shown targeting adenhq hive (CVE-2026-8757) https://vuldb.com/vuln/364384/cti

    Post summary

    The note indicates increased actor activity targeting CVE-2026-8757, suggesting potential real‑world exploitation, but it offers no technical or patch details.

    0000067
    2.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8757 Path Traversal in Adenhq Hive Up to 0.11.0 Delete Request Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8757

    Post summary

    The post announces a path traversal vulnerability in Adenhq Hive up to version 0.11.0, but provides no further technical details, PoC, exploit code, patch, or evidence of active exploitation.

    0000062
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appadenhqhive---

Explore more

Back to dashboardadenhq CVEshive vulnerabilities