YesWeHack

YesWeHack

CVEs, 365 days33 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationYesWeHack
RoleCNA
TypeBug Bounty Provider
Reports toENISA → mitre
ScopeVulnerabilities discovered by YesWeHack community hunters on products being tested on the platform with the permission of their owners, as part of Coordinated Vulnerability Disclosure.
Advisorieshttps://www.yeswehack.com/product/trust-security
  • CVE-2026-18796 2026-09-07 · CVSS 6.8
    Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the e
  • CVE-2026-14297 2026-09-07 · CVSS 8.7
    A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticat
  • CVE-2026-14296 2026-09-07 · CVSS 7.5
    When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the currently active slot without additiona

All CVE Program partners