Skip to content
OpenAdvisories
High · 8.2 CVE-2026-32138 EUVD-2026-11661

NEXULEAN API Key Leak

Published Mar 12, 2026 · Updated Mar 12, 2026 · Assigned by GitHub_M

Description

NEXULEAN is a cybersecurity portfolio & service platform for an Ethical Hacker, AI Enthusiast, and Penetration Tester. Prior to 2.0.0, a security vulnerability was identified where Firebase and Web3Forms API keys were exposed. An attacker could use these keys to interact with backend services without authentication, potentially leading to unauthorized access to application resources and user data. This vulnerability is fixed in 2.0.0.

Affected products

VendorProductAffectedFixed
Stalin-143 website < 2.0.0 —

References