CVE-2026-120295 | nerves-hub nerves_hub_web up to 2.5.2 Devices Page Bulk Move NervesHub.Products.get_by_id improper authorization

A vulnerability labeled as problematic has been found in nerves-hub nerves_hub_web up to 2.5.2. This impacts the function NervesHub.Products.get_by_id of the component Devices Page Bulk Move. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-120295. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More