{"vulnerability": "CVE-2026-58123", "sightings": [{"uuid": "ccbe04a4-17e1-49cf-8751-7981f12e1f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqamhoqmnr25", "content": "CVE-2026-58123 - hermes-webui\nA security flaw in older versions of Hermes WebUI allows attackers to run commands on the server without a password. This can happen if a hacker sends four specific\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hermeswebui #nesquena #CVE #infosec", "creation_timestamp": "2026-07-09T21:50:04.695151Z"}, {"uuid": "39192231-02ba-4fa9-89da-630773711436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58123", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqaqiazrqg2b", "content": "\ud83d\udd34 CVE-2026-58123 - Critical (9.8)\n\nHermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-58123/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-09T23:01:59.651207Z"}, {"uuid": "b6eb1e81-c86e-44bc-853f-8fc1e1dd605b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58123", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqarh5x7ej2i", "content": "CVE-2026-58123 - Hermes WebUI\nCVE ID : CVE-2026-58123\n \n Published : July 9, 2026, 10:17 p.m. | 15\u00a0minutes ago\n \n Description : Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell ...", "creation_timestamp": "2026-07-09T23:19:15.907323Z"}, {"uuid": "acc0e041-ac9b-46f8-8f39-18bb7bff4c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58123", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116893091456377643", "content": "CVE-2026-58123 | CRITICAL RCE in nesquena hermes-webui <0.51.788: Unauthenticated attackers can execute arbitrary shell commands via terminal API in 4 HTTP requests. Restrict endpoint access until patch confirmed. https://radar.offseq.com/threat/cve-2026-58123-missing-authentication-for-critical-9dba2eca75059736 #OffSeq #RCE #infosec #CVE", "creation_timestamp": "2026-07-10T01:30:26.146525Z"}, {"uuid": "1915f5b2-10e0-4b57-9a9a-9967aa2952fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-58123", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqayrr46nz2d", "content": "CRITICAL RCE in nesquena hermes-webui <0.51.788: Missing auth on terminal API enables remote code execution via 4 unauthenticated HTTP requests. Restrict access until patch confirmed. https://radar.offseq.com/threat/cve-2026-58123-missing-authentication-for-critical-9dba2eca75059736 #OffSeq #info...", "creation_timestamp": "2026-07-10T01:30:28.444473Z"}]}