Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Domoticz Clear all filters
TI-2026-09860 CVE-2026-11425 · GHSA-3f8p-349v-j5h8

Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering

Priority LOW 10

Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype…

CVSS 4.0LOW 2.0 Network Low privileges User interaction EPSS 0.00252 Published 2026-08-07 Fixed in 2026.3 CWE-79
TI-2026-49933 CVE-2026-71265 · GHSA-fgwp-vhm9-7g5q

Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()

Priority LOW 35

Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy…

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00286 Published 2026-08-05 No fix listed CWE-121
TI-2026-00755 CVE-2026-1001 · GHSA-gc8q-hv36-8qpc

Domoticz < 2026.1 Stored XSS via Hardware Configuration Endpoint

Priority LOW 21

Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of the web interface that allows authenticated administrators to execute arbitrary…

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00198 Published 2026-03-25 Fixed in 2026.1 CWE-79
TI-2019-11584 CVE-2019-15480 · GHSA-2595-5937-8f4h

Domoticz 4.10717 has XSS via item.Name.

Priority LOW 26

Domoticz 4.10717 has XSS via item.Name.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00677 Published 2019-08-23 No fix listed CWE-79