Search

Find a vulnerability

Search criteria

    2 vulnerabilities by hunvreus

    CVE-2026-16218 (GCVE-0-2026-16218)

    Vulnerability from nvd – Published: 2026-07-19 05:45 – Updated: 2026-07-20 13:57
    VLAI
    Title
    hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions
    Summary
    A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-703 - Improper Check or Handling of Exceptional Conditions
    Assigner
    References
    URL Tags
    https://vuldb.com/vuln/380041 vdb-entrytechnical-description
    https://vuldb.com/vuln/380041/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-16218 third-party-advisory
    https://vuldb.com/submit/857951 third-party-advisory
    https://github.com/hunvreus/devpush/issues/69 issue-tracking
    https://github.com/hunvreus/devpush/ product
    Impacted products
    Vendor Product Version
    hunvreus devpush Affected: 0.4.0
    Affected: 0.4.1
    Affected: 0.4.2
    Affected: 0.4.3
    Affected: 0.4.4
    Affected: 0.4.5
    Affected: 0.4.6
        cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Credits
    GalaxynX (VulDB User) VulDB CNA Team
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-16218",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-20T13:56:56.035215Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-20T13:57:18.074Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/hunvreus/devpush/issues/69"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Storage Reset Failure Handler"
              ],
              "product": "devpush",
              "vendor": "hunvreus",
              "versions": [
                {
                  "status": "affected",
                  "version": "0.4.0"
                },
                {
                  "status": "affected",
                  "version": "0.4.1"
                },
                {
                  "status": "affected",
                  "version": "0.4.2"
                },
                {
                  "status": "affected",
                  "version": "0.4.3"
                },
                {
                  "status": "affected",
                  "version": "0.4.4"
                },
                {
                  "status": "affected",
                  "version": "0.4.5"
                },
                {
                  "status": "affected",
                  "version": "0.4.6"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "GalaxynX (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 2.1,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 2.6,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 2.6,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 1.4,
                "vectorString": "AV:A/AC:H/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-703",
                  "description": "Improper Check or Handling of Exceptional Conditions",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-19T05:45:08.349Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-380041 | hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/380041"
            },
            {
              "name": "VDB-380041 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/380041/cti"
            },
            {
              "name": "CVE-2026-16218 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-16218"
            },
            {
              "name": "Submit #857951 | hunvreus devpush d67a99b62b3e2b044f1e0e9b06a3296fe1939fe3 CWE-703 Improper Check or Handling of Exceptional Conditions",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/857951"
            },
            {
              "tags": [
                "issue-tracking"
              ],
              "url": "https://github.com/hunvreus/devpush/issues/69"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://github.com/hunvreus/devpush/"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-07-18T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-07-18T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-07-18T12:01:04.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-16218",
        "datePublished": "2026-07-19T05:45:08.349Z",
        "dateReserved": "2026-07-18T09:55:57.419Z",
        "dateUpdated": "2026-07-20T13:57:18.074Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-16218 (GCVE-0-2026-16218)

    Vulnerability from cvelistv5 – Published: 2026-07-19 05:45 – Updated: 2026-07-20 13:57
    VLAI
    Title
    hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions
    Summary
    A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-703 - Improper Check or Handling of Exceptional Conditions
    Assigner
    References
    URL Tags
    https://vuldb.com/vuln/380041 vdb-entrytechnical-description
    https://vuldb.com/vuln/380041/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-16218 third-party-advisory
    https://vuldb.com/submit/857951 third-party-advisory
    https://github.com/hunvreus/devpush/issues/69 issue-tracking
    https://github.com/hunvreus/devpush/ product
    Impacted products
    Vendor Product Version
    hunvreus devpush Affected: 0.4.0
    Affected: 0.4.1
    Affected: 0.4.2
    Affected: 0.4.3
    Affected: 0.4.4
    Affected: 0.4.5
    Affected: 0.4.6
        cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Credits
    GalaxynX (VulDB User) VulDB CNA Team
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-16218",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-20T13:56:56.035215Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-20T13:57:18.074Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/hunvreus/devpush/issues/69"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:hunvreus:devpush:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Storage Reset Failure Handler"
              ],
              "product": "devpush",
              "vendor": "hunvreus",
              "versions": [
                {
                  "status": "affected",
                  "version": "0.4.0"
                },
                {
                  "status": "affected",
                  "version": "0.4.1"
                },
                {
                  "status": "affected",
                  "version": "0.4.2"
                },
                {
                  "status": "affected",
                  "version": "0.4.3"
                },
                {
                  "status": "affected",
                  "version": "0.4.4"
                },
                {
                  "status": "affected",
                  "version": "0.4.5"
                },
                {
                  "status": "affected",
                  "version": "0.4.6"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "GalaxynX (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the component Storage Reset Failure Handler. The manipulation results in improper check or handling of exceptional conditions. A high complexity level is associated with this attack. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 2.1,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 2.6,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 2.6,
                "baseSeverity": "LOW",
                "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 1.4,
                "vectorString": "AV:A/AC:H/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-703",
                  "description": "Improper Check or Handling of Exceptional Conditions",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-19T05:45:08.349Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-380041 | hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/380041"
            },
            {
              "name": "VDB-380041 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/380041/cti"
            },
            {
              "name": "CVE-2026-16218 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-16218"
            },
            {
              "name": "Submit #857951 | hunvreus devpush d67a99b62b3e2b044f1e0e9b06a3296fe1939fe3 CWE-703 Improper Check or Handling of Exceptional Conditions",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/857951"
            },
            {
              "tags": [
                "issue-tracking"
              ],
              "url": "https://github.com/hunvreus/devpush/issues/69"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://github.com/hunvreus/devpush/"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-07-18T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-07-18T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-07-18T12:01:04.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "hunvreus devpush Storage Reset Failure storage.py reset_storage improper check or handling of exceptional conditions"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-16218",
        "datePublished": "2026-07-19T05:45:08.349Z",
        "dateReserved": "2026-07-18T09:55:57.419Z",
        "dateUpdated": "2026-07-20T13:57:18.074Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }