CVE-2026-12060: Hepta Platforms Heptabase

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining unauthorized access to camera and microphone permissions.

Affected products

• Hepta Platforms Heptabase: before 1.90.5 (fixed in 1.90.5)

Published 2026-06-12. Last modified 2026-09-29.