agentprime: sysadminsmedia-homeboxEvery new CVE for sysadminsmedia-homebox.https://agentprime.io/CVE-2026-85287: HomeBox: Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Servicehttps://agentprime.io/advisories/CVE-2026-85287/https://agentprime.io/advisories/CVE-2026-85287/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:03:13 GMTCVECVE-2026-75599: HomeBox: Stored XSS via `javascript:` URI in Custom Entity Fieldshttps://agentprime.io/advisories/CVE-2026-75599/https://agentprime.io/advisories/CVE-2026-75599/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:02:37 GMTCVECVE-2026-85286: HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delayhttps://agentprime.io/advisories/CVE-2026-85286/https://agentprime.io/advisories/CVE-2026-85286/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:01:52 GMTCVECVE-2026-116680: Homebox generic notifier SSRF via HTTP redirect after URL validationhttps://agentprime.io/advisories/CVE-2026-116680/https://agentprime.io/advisories/CVE-2026-116680/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:43:52 GMTCVECVE-2026-55473: HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egresshttps://agentprime.io/advisories/CVE-2026-55473/https://agentprime.io/advisories/CVE-2026-55473/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:44:41 GMTCVECVE-2026-48826: HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switchinghttps://agentprime.io/advisories/CVE-2026-48826/https://agentprime.io/advisories/CVE-2026-48826/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:43:43 GMTCVECVE-2026-48974: HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handlerhttps://agentprime.io/advisories/CVE-2026-48974/https://agentprime.io/advisories/CVE-2026-48974/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:42:59 GMTCVECVE-2026-48975: HomeBox: Cross-Tenant IDOR in MaintenanceEntry Update and Delete Allows Tampering and Destruction of Any User's Maintenance History in Homeboxhttps://agentprime.io/advisories/CVE-2026-48975/https://agentprime.io/advisories/CVE-2026-48975/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:42:14 GMTCVECVE-2026-48976: HomeBox: Cross-Tenant IDOR in Notifier Update Leaks Shoutrrr Credentials and Allows Webhook Hijackhttps://agentprime.io/advisories/CVE-2026-48976/https://agentprime.io/advisories/CVE-2026-48976/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 17:41:16 GMTCVECVE-2026-40196: HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocationhttps://agentprime.io/advisories/CVE-2026-40196/https://agentprime.io/advisories/CVE-2026-40196/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 21:01:18 GMTCVECVE-2026-27981: HomeBox has an Auth Rate Limit Bypass via IP Spoofinghttps://agentprime.io/advisories/CVE-2026-27981/https://agentprime.io/advisories/CVE-2026-27981/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Mar 2026 22:27:37 GMTCVECVE-2026-27600: HomeBox affected by Blind SSRFhttps://agentprime.io/advisories/CVE-2026-27600/https://agentprime.io/advisories/CVE-2026-27600/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Mar 2026 22:23:04 GMTCVECVE-2026-26272: HomeBox affected by Stored XSS via HTML/SVG Attachment Uploadhttps://agentprime.io/advisories/CVE-2026-26272/https://agentprime.io/advisories/CVE-2026-26272/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Mar 2026 22:20:32 GMTCVECVE-2025-53108: HomeBox Missing User Authorizationhttps://agentprime.io/advisories/CVE-2025-53108/https://agentprime.io/advisories/CVE-2025-53108/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Jul 2025 14:45:27 GMTCVE