NetHerman vulnerabilities

Products

• Portal del Hermano (portaldelhermano.es) 1

Latest NetHerman CVEs

Newest publication first

1. CVE-2026-53997 Netherman Portal del Hermano Account Takeover via Password Reset Oracle

   Published 2026-10-12

   Critical·CVSS 9.1 EPSS 0.40%

   Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken authentication vulnerability in its password-recovery flow at the POST /password/create-access and POST /password/email endpoints, allowing unauthenticated attackers to take over any member acc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.