CVE-2026-90490Proof of concept (PoC) published · CISA
lenve vhr MailReceiver deserialization
CVSS score
5.3
EPSS probability
%0.4
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.2
CVE-2026-85214
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
L
Patch status unknownEPSS %1
7.1
CVE-2026-110217
vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs
L
Patch status unknownEPSS %1
7.7
CVE-2026-85182
vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change
L
Patch status unknownEPSS %0
6.9
CVE-2026-90498
lenve vhr vhr.sql default credentials
L
Patch status unknownEPSS %0
5.3
CVE-2026-90499
lenve vhr Password Update pass HrInfoController.updatePass improper authorization
L
Patch status unknownEPSS %0
5.3
CVE-2026-90501
lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
L
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-90490"