CVE-2026-12060

6.5 MEDIUM

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attacker...

Published: 2026-06-12 · Last updated: 2026-06-12

Severity and scoring

CVSS: 6.5 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE: CWE-749

Description

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining unauthorized access to camera and microphone permissions.

Source: NVD

References

Related CVEs

Same CWE

CVE-2026-49993 — Nuxt is an open-source web development framework for Vue.js
CVE-2026-45670 — Nuxt is an open-source web development framework for Vue.js
CVE-2026-7516 — A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could al... (4.3 MEDIUM)
CVE-2026-47899 — The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path v...
CVE-2026-44698 — Home Assistant is open source home automation software that puts local control and privacy first (8.3 HIGH)