CVE-2026-32138 - Vulnerability Analysis

Overview

NEXULEAN < 2.0.0 contains an information disclosure caused by exposed Firebase and Web3Forms API keys, letting attackers interact with backend services without authentication, exploit requires exposed API keys.

Severity & Score

Impact

Attackers can access application resources and user data without authentication, leading to unauthorized data access.

Mitigation

Upgrade to version 2.0.0.

References

• https://github.com/Stalin-143/website/releases/tag/v2.0.0
• https://github.com/Stalin-143/website/security/advisories/GHSA-r7cr-5wcx-x9wm

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 12, 2026

🟠 CVE-2026-32138 - High (8.2) NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where Firebase and Web3Forms API keys were exposed. An attacker could us... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32138/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner