Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: NetBox Labs Clear all filters
TI-2026-48522 CVE-2026-69117 · GHSA-5cvq-gqwq-xhfc

NetBox 4.5.8 ORM Injection via WritableNestedSerializer

Priority MEDIUM 64

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supp…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00318 Published 2026-08-11 No fix listed CWE-639
TI-2023-12284 CVE-2023-27573 · GHSA-vf6r-c2jr-9wjq

Hard-coded credentials in netbox-community netbox-docker

Priority HIGH 76

netbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef0123456789abcdef01234567 value for SUPERUSER_API_TOKEN).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00566 Published 2026-03-11 Fixed in 2.5.0 CWE-1392