Vulnerabilities

TI-2026-85499 CVE-2026-85287

Email case sensitivity in HomeBox allows duplicate accounts

LOW 29

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00291 Published 2026-11-05 Fixed in 0.27.0 CWE-1024

TI-2026-85497 CVE-2026-75599

Stored XSS via javascript: URI in HomeBox custom entity fields

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00165 Published 2026-11-05 Fixed in 0.27.0 CWE-79

TI-2026-85490 CVE-2026-85286

Timing side channel in HomeBox login reveals registered users

LOW 17

HomeBox is a home inventory and organization system.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00291 Published 2026-11-05 Fixed in 0.27.0 CWE-204

TI-2026-81496 CVE-2026-116680

Server-side request forgery in Homebox notifier via HTTP redirects

LOW 28

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-27 Fixed in 0.27.0 CWE-918

TI-2026-40030 CVE-2026-55473

Server-side request forgery in sysadminsmedia homebox

LOW 27

HomeBox is a home inventory and organization system.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00414 Published 2026-09-21 Fixed in 0.26.0 CWE-918

TI-2026-36094 CVE-2026-48826

HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching

LOW 36

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00488 Published 2026-09-21 Fixed in 0.26.0 CWE-269

TI-2026-36230 CVE-2026-48974

HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handler

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00294 Published 2026-09-21 Fixed in 0.26.0 CWE-841

TI-2026-36231 CVE-2026-48975

Authorization bypass in sysadminsmedia homebox

LOW 38

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00488 Published 2026-09-21 Fixed in 0.26.0 CWE-639

TI-2026-36232 CVE-2026-48976

HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack

LOW 38

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00449 Published 2026-09-21 Fixed in 0.26.0 CWE-522

TI-2026-29010 CVE-2026-40196

HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation

LOW 37

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00247 Published 2026-04-17 Fixed in 0.25.0 CWE-708

TI-2026-22323 CVE-2026-27981

HomeBox has an Auth Rate Limit Bypass via IP Spoofing

LOW 34

HomeBox is a home inventory and organization system.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00298 Published 2026-03-03 Fixed in 0.24.0 CWE-307

TI-2026-21986 CVE-2026-27600

HomeBox affected by Blind SSRF

LOW 22

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00212 Published 2026-03-03 Fixed in 0.24.0-rc.1 CWE-918

TI-2026-21242 CVE-2026-26272

HomeBox affected by Stored XSS via HTML/SVG Attachment Upload

LOW 24

HomeBox is a home inventory and organization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00194 Published 2026-03-03 Fixed in 0.24.0-rc.1 CWE-79

TI-2025-33101 CVE-2025-53108

HomeBox Missing User Authorization

LOW 24

HomeBox is a home inventory and organization system.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00301 Published 2025-07-02 Fixed in 0.20.1 CWE-862

Vulnerabilities

Filters