CVE-2026-120997 | nerves-hub nerves_hub_web up to 2.5.2 Dashboard assign_org_to_scope session expiration

A vulnerability described as critical has been identified in nerves-hub nerves_hub_web up to 2.5.2. Affected by this vulnerability is the function assign_org_to_scope of the component Dashboard. The manipulation results in session expiration.

This vulnerability is known as CVE-2026-120997. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More