Vulnerabilities in nerves-hub

2 results
CVE-2025-64097CRITICALNervesHub has Insufficient Token Entropy that Allows Authentication Bypass via Brute ForceEPSS 0.4%CVE-2026-28806CRITICALImproper authorization in device bulk actions and device update API allows cross-organization device controlEPSS 0.4%