CVE-2026-101049Proof of concept (PoC) published · CISA
Heym before 0.0.53 Slack Webhook Signature Verification Bypass
CVSS score
8.3
EPSS probability
%0.3
Risk score
0.0
Published
18 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engine
H
Patch status unknownEPSS %1
8.8
CVE-2026-55376
heym Python Tool Sandbox Escape
H
Patch status unknownEPSS %0
8.7
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
H
Patch verifiedEPSS %0
8.3
CVE-2026-101050
Heym before 0.0.53 Authentication Bypass via Telegram Webhook
H
Patch verifiedEPSS %0
7.6
CVE-2026-100858
heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes
H
Patch status unknownEPSS %0
5.3
CVE-2026-84207
Heym before 0.0.98 SSRF via WebSocket endpoints
H
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-101049"