Vulnerabilities

TI-2026-29010 CVE-2026-40196

HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation

LOW 37

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00247 Published 2026-04-17 Fixed in 0.25.0 CWE-708

TI-2026-22323 CVE-2026-27981

LOW 34

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00298 Published 2026-03-03 Fixed in 0.24.0 CWE-307

TI-2026-21986 CVE-2026-27600

LOW 22

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00212 Published 2026-03-03 Fixed in 0.24.0-rc.1 CWE-918

TI-2026-21242 CVE-2026-26272

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00194 Published 2026-03-03 Fixed in 0.24.0-rc.1 CWE-79