CVE-2026-32138CWE-284CWE-798

NEXULEAN API Key Leak

High · published March 12, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where Firebase and Web3Forms API keys were exposed. An attacker could use these keys to interact with backend services without authentication, potentially leading to unauthorized access to application resources and user data. This vulnerability is fixed in 2.0.0.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00448 · 38.0th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-798 · Use of Hard-coded Credentials
Published
2026-03-12T18:32Z
EPSS history
Timeline
  • 12 MAR 18:32Z
    NEXULEAN API Key Leak
    cvelistv5