Skip to content
Threat Feed
Subscribe

Tag

Hermes

1 brief RSS
critical advisory

Critical RCE Vulnerability in Hermes WebUI (CVE-2026-58123)

An unauthenticated remote code execution vulnerability, CVE-2026-58123, exists in Hermes WebUI versions prior to 0.51.788, allowing remote attackers to execute arbitrary shell commands by accessing exposed terminal API endpoints without credentials, leading to full command execution as the server process user.

Hermes WebUI < 0.51.788 cve rce web-exploitation hermes api-exploitation
1r 2t 1c