PatchTheCVEnerveshub vulnerabilities and fixes
Recent CVEs affecting nerveshub, with upgrade or downgrade steps. 2 tracked.
nerveshub has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-10. Highest priority: CVE-2025-64097 (score 49/100).
- CVE-2026-28806 HIGH 8.8 UPGRADE Improper Authorization vulnerability in nerves-hub nerves_hub_web allows cross-organization device control via
- CVE-2025-64097 CRITICAL 9.8 UPGRADE NervesHub is a web service that allows users to manage over-the-air (OTA) firmware updates of devices in the f
FAQ
How do I fix nerveshub vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nerveshub being exploited right now?
None of the tracked nerveshub CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nerveshub CVE should I patch first?
CVE-2025-64097 currently ranks highest (49/100): NervesHub is a web service that allows users to manage over-the-air (OTA) firmware updates of devices in the f.