Vulnerabilidades en sysadminsmedia
10 resultadosAnálisis Vexday
A sysadminsmedia apresenta um perfil de risco contido com apenas 5 vulnerabilidades registradas, nenhuma delas explorada ativamente ou classificada como crítica. A fraqueza predominante (CWE-307 - controle de taxa inadequado) sugere vulnerabilidades de baixa a média severidade, e a ausência de publicações recentes indica que o panorama de risco não está em evolução aguda.
CVE-2026-48826HIGHHomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header SwitchingEPSS 0.5%CVE-2026-48975HIGHHomeBox: Cross-Tenant IDOR in MaintenanceEntry Update and Delete Allows Tampering and Destruction of Any User's Maintenance History in HomeboxEPSS 0.5%CVE-2026-48976HIGHHomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook HijackEPSS 0.4%CVE-2026-55473MEDIUMHomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egressEPSS 0.4%CVE-2026-27981HIGHHomeBox has an Auth Rate Limit Bypass via IP SpoofingEPSS 0.4%CVE-2026-40196HIGHHomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access RevocationEPSS 0.4%CVE-2026-48974MEDIUMHomeBox: Forced Group Membership Without Consent in Homebox AddMember HandlerEPSS 0.3%CVE-2026-27600MEDIUMHomeBox affected by Blind SSRFEPSS 0.3%CVE-2025-53108MEDIUMHomeBox Missing User AuthorizationEPSS 0.3%CVE-2026-26272MEDIUMHomeBox affected by Stored XSS via HTML/SVG Attachment UploadEPSS 0.2%