Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

sysadminsmedia — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting sysadminsmedia. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Sysadminsmedia develops IT management and monitoring software for system administrators, with five CVEs recorded in its history. Common vulnerabilities include remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and access control issues. The platform has faced security incidents related to authentication bypasses and insecure default configurations, potentially exposing administrative functions. While no major breaches have been widely documented, the presence of multiple CVEs indicates ongoing security challenges in securing administrative interfaces and API endpoints. The organization has addressed vulnerabilities through patches, though the frequency of issues suggests a need for enhanced security-by-design principles in future development cycles.

Top products by sysadminsmedia: homebox
CVE ID Title CVSS Severity Published
CVE-2026-116680 Homebox generic notifier SSRF via HTTP redirect after URL validation — homebox CWE-918 6.4 Medium 2026-10-27
CVE-2026-55473 HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egress — homebox CWE-918 6.0 Medium 2026-09-21
CVE-2026-48826 HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching — homebox CWE-269 8.1 High 2026-09-21
CVE-2026-48974 HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handler — homebox CWE-841 5.4 Medium 2026-09-21
CVE-2026-48975 HomeBox: Cross-Tenant IDOR in MaintenanceEntry Update and Delete Allows Tampering and Destruction of Any User's Maintenance History in Homebox — homebox CWE-639 8.1 High 2026-09-21
CVE-2026-48976 HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack — homebox CWE-522 8.1 High 2026-09-21
CVE-2026-40196 HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation — homebox CWE-708 8.1 High 2026-04-17
CVE-2026-27981 HomeBox has an Auth Rate Limit Bypass via IP Spoofing — homebox CWE-307 7.4 High 2026-03-03
CVE-2026-27600 HomeBox affected by Blind SSRF — homebox CWE-918 5.0 Medium 2026-03-03
CVE-2026-26272 HomeBox affected by Stored XSS via HTML/SVG Attachment Upload — homebox CWE-79 4.6 Medium 2026-03-03
CVE-2025-53108 HomeBox Missing User Authorization — homebox CWE-862 7.1AI High AI 2025-07-02

This page lists every published CVE security advisory associated with sysadminsmedia. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.