Vulnerabilities in sipcapture

3 results

CVE-2026-62253CRITICALHomer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)EPSS —CVE-2026-62252CRITICALHomer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First LoginEPSS —CVE-2026-62251HIGHHomer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/queryEPSS —