The boneIO Black firmware has a critical security vulnerability where authentication is disabled by default. The management web API listens on all network interfaces and exposes all endpoints without requiring credentials, allowing unauthenticated remote attackers full control over the device. This can lead to denial of service, configuration changes, and manipulation of connected physical circuits. The issue is fixed in version 1.6.0, which enforces administrator account creation and restricts API access to authenticated roles. Versions before 1.2.0 are unsupported and require re-flashing with the fixed system image.
boneIO Black versions prior to 1.6.0 do not limit authentication attempts on their web interface or SSH service and lack password complexity enforcement. This allows unauthenticated remote attackers to perform unlimited brute-force login attempts, potentially compromising user accounts and gaining unauthorized access. The issue was fixed in version 1.6.0 by implementing rate limiting on web login attempts, enforcing a minimum password length of 8 characters, and restricting SSH authentication attempts to three per connection with a shortened login grace time.
boneIO Black has a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the create_timedatectl_sudoers_file() function. This function writes sudoers rules to a predictable temporary file, validates them, and then installs them with root privileges. A local attacker can exploit the race window between validation and installation or use the predictable filename for symlink attacks to inject arbitrary sudoers rules, leading to local privilege escalation to root. The issue is fixed in version 1.6.0.
A critical vulnerability (CVE-2026-93328) exists in Google Cloud MCP Toolbox for Databases versions 1.2.0 through 1.4.0. It involves path traversal and missing authorization in the cloud-storage source component, allowing unauthenticated remote attackers to exfiltrate host files to external Google Cloud Storage buckets and overwrite arbitrary local files via crafted parameters.
The boneIO black_debian_images container image granted the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. This allowed a local attacker who compromises the boneio user to escalate privileges to root. The issue was fixed in version 1.6.0 by removing the sudoers rule and docker group membership, and by enforcing privileged operations through restricted helpers with verified migrations.
boneIO Black versions prior to 1.6.0 expose an unauthenticated Node-RED instance at the /nodered/ path via a Caddy reverse proxy. This Node-RED Admin API allows deployment of flows capable of executing arbitrary system commands. An unauthenticated attacker on the local network can exploit this to deploy malicious flows, resulting in remote code execution and full control over the home automation system. The vulnerability is fixed in version 1.6.0.
boneIO Black versions prior to 1.6.0 store sensitive passwords, including MQTT broker and web panel passwords, in cleartext. The API endpoint GET /api/config exposes these passwords to any authenticated user. Due to a related issue (CVE-2026-77053) where authentication is disabled by default, unauthenticated attackers on the same local network can also retrieve all passwords. Version 1.6.0 fixes this by hashing web panel passwords with salted scrypt and restricting access to password files, while MQTT broker passwords are stored securely and no longer exposed via the API.
boneIO black_debian_images includes a Mosquitto MQTT broker configured with default credentials that are identical across all devices and publicly documented. This allows remote attackers to gain full read and write access to the broker, enabling control over connected devices such as relays, blinds, and gates, and the injection of fake entities into linked Home Assistant installations. The issue was fixed in version 1.6.0 by generating unique MQTT passwords per device at first boot. Devices upgraded from earlier versions retain the default credentials unless manually changed.
CVE-2026-65184 is a critical vulnerability in the root-privileged wsserver terminal-bridge daemon. The daemon constructs shell commands directly from client-supplied WebSocket fields and executes them via system() and popen() calls without any quoting, escaping, or character-set validation. Additionally, the daemon's public-key session path lacks appliance-session checks, increasing the risk of unauthorized command execution.
CVE-2026-3322 is a vulnerability in Lobster_pro where improper permission checks allow attackers with limited privileges to access endpoints that should require administrative rights. This affects Lobster_pro version 4.12.12-LTS and possibly other versions before 25.1.3. The flaw could enable privilege escalation or unauthorized actions via these endpoints.
Xovis AG APS-R series devices up to version 2.10.1.1 contain an OS command injection vulnerability in the /sbin/ImportParamSet.sh script. This script processes symlinks from uploaded parameter archive files and embeds the symlink target path into a shell command without proper quoting or sanitization. The command is executed with root privileges via the APC_SendMsg IPC mechanism.
A security vulnerability in Kameleo up to version 5.3.1 affects the Local API component, specifically the /general/user-info endpoint. This vulnerability allows remote attackers to cause information disclosure. The vendor was notified but has not responded. The vulnerability has a medium severity rating with a CVSS score of 4.3.
CVE-2026-59107 is a critical security vulnerability in the vSolution Matrix file sharing feature. It allows an attacker who obtains the matching private key to authenticate via SSH as root on devices configured as a vSolution Matrix main/master station with file sharing enabled.
CVE-2026-59106 is a critical vulnerability in the WolfProt interface implementation that allows unauthenticated remote attackers to execute operating system commands with the privileges of the affected service due to insufficient neutralization of user-controlled input.
A medium-severity authorization bypass vulnerability exists in iFlytek astron-agent up to version 1.1.2. The flaw affects the FileInfoV2Service.listKnowledgeByPage function via manipulation of the argument space-id, allowing unauthorized access. The vulnerability can be exploited remotely. Public exploit code is available, but no vendor response or patch has been provided.
A NULL pointer dereference vulnerability in gssproxy allows any local user to crash the daemon by sending a GSSX_INIT_SEC_CONTEXT request missing the target_name field. This causes the daemon to crash and not restart automatically, resulting in a persistent denial of service that affects dependent services such as Kerberized NFS and IdM.
An SQL Injection vulnerability exists in CRM SOFTTRADE Infotech (softtradeindia) version 1.0, allowing a remote attacker to execute arbitrary code via the login page.
A vulnerability in iFlytek astron-agent up to version 1.1.2 affects the DDL Whitelist Handler component, specifically in the file core/memory/database/api/v1/exec_ddl.py. This flaw causes an incomplete blacklist, potentially allowing unauthorized actions. The vulnerability can be exploited remotely and has publicly disclosed exploit code. The vendor has not responded to the disclosure. The CVSS score is 7.3, indicating a high severity.
A local information disclosure vulnerability exists in Kameleo versions up to 5.0.1.26 in the ListProfiles function of the Profile Controller component. This flaw allows an attacker with local access to obtain information improperly. The issue is resolved by upgrading to version 5.2.0.
A vulnerability in the hackney_conn component of the benoitc hackney HTTP client allows a malicious HTTP server to exhaust client memory by sending an oversized or highly compressed response body. The client buffers the entire response without limits, and with auto decompression enabled, decompresses the entire body at once, leading to potential resource exhaustion. This affects hackney versions from 2.0.0-beta.1 up to but not including 4.9.0.