CVE-2026-78213 is a Stored Cross-Site Scripting vulnerability in Heptabase developed by Hepta Platforms, Inc. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content. This vulnerability has a CVSS score of 6.2 and a severity of MEDIUM. Defenders should assess exposure and prioritize [truncated]
CVE-2026-12060 is a medium-severity vulnerability in Heptabase developed by Hepta Platforms, allowing unauthenticated remote attackers to gain unauthorized access to camera and microphone permissions via social engineering. Defenders should prioritize verifying Heptabase application configurations and user interactions to prevent exploitation. The vulnerability has an Exposed Dangerous Method or Function, [truncated]
