CVE-2026-32138

NEXULEAN API Key Leak

CVSS 8.2 HIGHEPSS 0.3%CWE-284 CWE-798

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.2EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 mar 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where Firebase and Web3Forms API keys were exposed. An attacker could use these keys to interact with backend services without authentication, potentially leading to unauthorized access to application resources and user data. This vulnerability is fixed in 2.0.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Produtos afetados

Stalin-143 · website

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/Stalin-143/website/releases/tag/v2.0.0 https://github.com/Stalin-143/website/security/advisories/GHSA-r7cr-5wcx-x9wm