Is CVE-2026-8757 actively exploited?

No active exploitation of CVE-2026-8757 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-8757 be exploited remotely?

Yes. CVE-2026-8757 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-8757?

CVE-2026-8757 has a CVSS score of 9.1 (CRITICAL).

HOME VULNERABILITIESCVE-2026-8757

CRITICAL

CVE-2026-8757

CWE-22Published: May 17, 2026· Updated: May 19, 2026

9.1

CVSS v3.1

EPSS:0.18%probability of exploitation in 30 daysPercentile:38.7th

Official Description

A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the component Delete Request Handler. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Risk Analysis

This critical path traversal vulnerability in adenhq hive allows an attacker to manipulate delete requests. By exploiting the '_read_events_tail' function, an attacker can perform path traversal, potentially leading to unauthorized file manipulation. With a CVSS score of 9.1, this is a serious concern.

No public exploit is currently known for this vulnerability, though the exploit has been made public. The flaw is remotely exploitable and requires no authentication.

Recommended Action

Upgrade adenhq hive to a version beyond 0.11.0 to address this path traversal vulnerability. Implement strict input validation for file paths in delete request handlers.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2026-8757 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.1.