S
Vendor security profile
sysadminsmedia
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
5
0
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.0
CVE-2026-55473
HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egress
S
Patch status unknownEPSS %0
8.1
CVE-2026-48826
HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching
S
Patch status unknownEPSS %0
5.4
CVE-2026-48974
HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handler
S
Patch status unknownEPSS %0
8.1
CVE-2026-48975
HomeBox: Cross-Tenant IDOR in MaintenanceEntry Update and Delete Allows Tampering and Destruction of Any User's Maintenance History in Homebox
S
Patch status unknownEPSS %0
8.1
CVE-2026-48976
HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijack
S
Patch status unknownEPSS %0