sysadminsmedia records

4 published records for vendor sysadminsmedia.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2026-40196No exploit	HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocationsysadminsmedia · homebox · CWE-708	High8.1	—	0.4%	Apr 17, 2026
29Monitor	CVE-2026-27981No exploit	HomeBox has an Auth Rate Limit Bypass via IP Spoofingsysadminsmedia · homebox · CWE-307 Pre-auth	High7.4	—	0.4%	Mar 3, 2026
21Monitor	CVE-2026-26272No exploit	HomeBox affected by Stored XSS via HTML/SVG Attachment Uploadsysadminsmedia · homebox · CWE-79 XSS	Medium5.4	—	0.2%	Mar 3, 2026
17Monitor	CVE-2026-27600No exploit	HomeBox affected by Blind SSRFsysadminsmedia · homebox · CWE-918 SSRF	Medium4.3	—	0.3%	Mar 3, 2026

CVE-2026-40196
32Monitor
HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation
HighCVSS 8.1No exploitEPSS 0%
sysadminsmedia · homeboxApr 17, 2026
CVE-2026-27981
29Monitor
HomeBox has an Auth Rate Limit Bypass via IP Spoofing
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
sysadminsmedia · homeboxMar 3, 2026
CVE-2026-26272
21Monitor
HomeBox affected by Stored XSS via HTML/SVG Attachment Upload
MediumCVSS 5.4No exploitEPSS 0%
- XSS
sysadminsmedia · homeboxMar 3, 2026
CVE-2026-27600
17Monitor
HomeBox affected by Blind SSRF
MediumCVSS 4.3No exploitEPSS 0%
- SSRF
sysadminsmedia · homeboxMar 3, 2026