HarborGuard / CVE
Back to search
HIGHCVE-2026-32138Published Modified CNA GitHub_M

CVE-2026-32138: NEXULEAN API Key Leak

NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where Firebase and Web3Forms API keys were exposed. An attacker could use these keys to interact with backend services without authentication, potentially leading to unauthorized access to application resources and user data. This vulnerability is fixed in 2.0.0.

Metrics

CVSS v3.1
8.2
Severity
HIGH
Fixed in
Affected Products
1
Affected packages
  • Stalin-143 / website
    < 2.0.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N