Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 24

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00433 Published 2026-07-15 Fixed in 2.4.18.029 CWE-862
Priority LOW 31

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00359 Published 2026-07-15 Fixed in 2.4.18.029 CWE-522