Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: sergejey Clear all filters
TI-2026-21622 CVE-2026-27180 · GHSA-grp8-p6j9-9x5f

MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning

Priority MEDIUM 50

MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code execution through supply chain compromise via update URL poisoning.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01198 Published 2026-02-18 No fix listed CWE-494
TI-2026-21621 CVE-2026-27179 · GHSA-w366-h875-fm53

MajorDoMo Unauthenticated SQL Injection in Commands Module

Priority MEDIUM 45

MajorDoMo (aka Major Domestic Module) contains an unauthenticated SQL injection vulnerability in the commands module.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00527 Published 2026-02-18 No fix listed CWE-89
TI-2026-21619 CVE-2026-27177 · GHSA-c59q-pmw5-v3pf

MajorDoMo Stored Cross-Site Scripting via Property Set Endpoint

Priority LOW 29

MajorDoMo (aka Major Domestic Module) contains a stored cross-site scripting (XSS) vulnerability via the /objects/?op=set endpoint, which is intentionally unauthenticated for IoT device integration.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00229 Published 2026-02-18 No fix listed CWE-79
TI-2026-21618 CVE-2026-27176 · GHSA-rpq9-4jjf-2xhh

MajorDoMo Reflected Cross-Site Scripting in command.php

Priority LOW 24

MajorDoMo (aka Major Domestic Module) contains a reflected cross-site scripting (XSS) vulnerability in command.php.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.005 Published 2026-02-18 No fix listed CWE-79