Vulnerabilidades em netbox-community
7 resultadosAnálise Vexday
Netbox-community apresenta postura de risco moderada com 2 vulnerabilidades catalogadas, sendo 1 crítica e nenhuma sob exploração ativa conhecida. O risco recente é relevante com 1 CVE publicada nos últimos 90 dias, e a fraqueza dominante (CWE-1392) aponta para questões estruturais de inicialização ou configuração que demandam atenção preventiva.
CVE-2026-29514HIGHNetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixinEPSS 1.1%CVE-2026-54752CRITICALNetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull RequestEPSS 0.7%CVE-2026-54916HIGHNetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theftEPSS 0.6%CVE-2023-27573CRITICALnetbox-docker before 2.5.0 has a superuser account with default credentials (admin password for the admin account, and 0123456789abcdef01234EPSS 0.5%CVE-2026-86175HIGHNetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIsEPSS 0.5%CVE-2026-54918MEDIUMNetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CIEPSS 0.4%CVE-2026-86176MEDIUMNetBox through 4.7.0 Information Disclosure via REST and GraphQL APIsEPSS 0.3%