sysadminsmedia

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

sysadminsmedia records in CISA KEV

No sysadminsmedia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Homebox 4 records LOW

Records

14 records

TI-2026-36232 CVE-2026-48976

HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack

LOW 38

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00449 Published 2026-09-21 Fixed in 0.26.0 CWE-522

TI-2026-36231 CVE-2026-48975

Authorization bypass in sysadminsmedia homebox

LOW 38

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00488 Published 2026-09-21 Fixed in 0.26.0 CWE-639

TI-2026-29010 CVE-2026-40196

HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation

LOW 37

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00247 Published 2026-04-17 Fixed in 0.25.0 CWE-708

TI-2026-36094 CVE-2026-48826

HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching

LOW 36

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00488 Published 2026-09-21 Fixed in 0.26.0 CWE-269

TI-2026-22323 CVE-2026-27981

HomeBox has an Auth Rate Limit Bypass via IP Spoofing

LOW 34

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00298 Published 2026-03-03 Fixed in 0.24.0 CWE-307

TI-2026-85499 CVE-2026-85287

Email case sensitivity in HomeBox allows duplicate accounts

LOW 29

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00291 Published 2026-11-05 Fixed in 0.27.0 CWE-1024

TI-2026-81496 CVE-2026-116680

Server-side request forgery in Homebox notifier via HTTP redirects

LOW 28

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-27 Fixed in 0.27.0 CWE-918

TI-2026-40030 CVE-2026-55473

Server-side request forgery in sysadminsmedia homebox

LOW 27

HomeBox is a home inventory and organization system.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00414 Published 2026-09-21 Fixed in 0.26.0 CWE-918

TI-2026-85497 CVE-2026-75599

Stored XSS via javascript: URI in HomeBox custom entity fields

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00165 Published 2026-11-05 Fixed in 0.27.0 CWE-79

TI-2026-36230 CVE-2026-48974

HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handler

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00294 Published 2026-09-21 Fixed in 0.26.0 CWE-841

TI-2026-21242 CVE-2026-26272

HomeBox affected by Stored XSS via HTML/SVG Attachment Upload

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00194 Published 2026-03-03 Fixed in 0.24.0-rc.1 CWE-79

TI-2025-33101 CVE-2025-53108

HomeBox Missing User Authorization

LOW 24

HomeBox is a home inventory and organization system.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00301 Published 2025-07-02 Fixed in 0.20.1 CWE-862

TI-2026-21986 CVE-2026-27600

HomeBox affected by Blind SSRF

LOW 22

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00212 Published 2026-03-03 Fixed in 0.24.0-rc.1 CWE-918

TI-2026-85490 CVE-2026-85286

Timing side channel in HomeBox login reveals registered users

LOW 17

HomeBox is a home inventory and organization system.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00291 Published 2026-11-05 Fixed in 0.27.0 CWE-204

Open these records in search →