Read the docs

NetBox Labs

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

NetBox Labs records in CISA KEV

No NetBox Labs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Netbox-docker 1 record HIGH

Records

3 records

TI-2023-12284 CVE-2023-27573 · GHSA-vf6r-c2jr-9wjq

Hard-coded credentials in netbox-community netbox-docker

Priority HIGH 76

netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_API_TOKEN).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00566 Published 2026-03-11 Fixed in 2.5.0 CWE-1392
TI-2026-48522 CVE-2026-69117 · GHSA-5cvq-gqwq-xhfc

NetBox 4.5.8 ORM Injection via WritableNestedSerializer

Priority MEDIUM 64

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supp…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00318 Published 2026-08-11 No fix listed CWE-639
Open these records in search →