shellhub records

4 published records for vendor shellhub.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2026-44426No exploit	ShellHub: Cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership checkshellhub · shellhub · CWE-639 Broken access control (IDOR)	Medium6.5	—	0.4%	May 13, 2026
26Monitor	CVE-2026-44423No exploit	ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session datashellhub · shellhub · CWE-639 Broken access control (IDOR)	Medium6.5	—	0.3%	May 13, 2026
26Monitor	CVE-2026-44424No exploit	ShellHub: Cross-tenant IDOR in `GET /api/devices/:uid` discloses device data of any namespaceshellhub · shellhub · CWE-639 Broken access control (IDOR)	Medium6.5	—	0.3%	May 13, 2026
21Monitor	CVE-2026-44425No exploit	ShellHub: Crash-DoS via field injection in filter and sort-by parametersshellhub · shellhub · CWE-20	Medium5.4	—	0.3%	May 13, 2026

CVE-2026-44426
26Monitor
ShellHub: Cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
shellhub · shellhubMay 13, 2026
CVE-2026-44423
26Monitor
ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
shellhub · shellhubMay 13, 2026
CVE-2026-44424
26Monitor
ShellHub: Cross-tenant IDOR in `GET /api/devices/:uid` discloses device data of any namespace
MediumCVSS 6.5No exploitEPSS 0%
- Broken access control (IDOR)
shellhub · shellhubMay 13, 2026
CVE-2026-44425
21Monitor
ShellHub: Crash-DoS via field injection in filter and sort-by parameters
MediumCVSS 5.4No exploitEPSS 0%
shellhub · shellhubMay 13, 2026