Threat database

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change mechanism. Any attacker who reaches the login endpoint immediately gains full administrative access. Version 11.0.283 patches the issue.

Homer, an open source telecom observability software, had a critical vulnerability (CVE-2026-62253) prior to version 11.0.283 where its JWT middleware functions allowed unauthenticated access to protected API endpoints. This was due to the JWT secret defaulting to an empty string, causing the middleware to bypass authentication checks. The issue was fixed in version 11.0.283.

CVE-2026-62251 is a high-severity SQL injection vulnerability in sipcapture homer, an open source telecom observability software. Versions prior to 11.0.283 allow authenticated users to execute arbitrary SQL commands via the V4StatisticsQuery handler, which fails to validate user-supplied SQL queries properly. This issue is patched in version 11.0.283.