sysadminsmedia has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was September 2026 with 5. The median CVSS is 8.1 (high). None have a confirmed exploitation report. The most common weakness class is CWE-639 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.1
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-48976High· 8.1HomeBox is a home inventory and organization system45CVE-2026-48975High· 8.1HomeBox is a home inventory and organization system45CVE-2026-48826High· 8.1HomeBox is a home inventory and organization system45CVE-2026-55473Medium· 6.0HomeBox is a home inventory and organization system33CVE-2026-48974Medium· 5.4HomeBox is a home inventory and organization system30
sysadminsmedia vulnerabilities
CVEs affecting sysadminsmedia, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-55473Medium· 6.0HomeBox is a home inventory and organization system
HomeBox is a home inventory and organization system. Prior to 0.26.0, the default-on BlockBogonNets and BlockCloudMetadata notifier SSRF protections in backend/internal/sys/validate/notifier_url.go do not inspect IPv4 destinations embedd…
CVE-2026-48826High· 8.1HomeBox is a home inventory and organization system
HomeBox is a home inventory and organization system. Prior to 0.26.0, HandleWipeInventory in backend/app/api/handlers/v1/v1_ctrl_actions.go authorizes POST /v1/actions/wipe-inventory through the global ctx.User.IsOwner value instead of t…
CVE-2026-48976High· 8.1HomeBox is a home inventory and organization system
HomeBox is a home inventory and organization system. Prior to 0.26.0, NotifierRepository.Update in backend/internal/data/repo/repo_notifier.go updates a notifier through UpdateOneID(id) without requiring the record's user ID to match the…
CVE-2026-48975High· 8.1HomeBox is a home inventory and organization system
HomeBox is a home inventory and organization system. Prior to 0.26.0, MaintenanceEntryRepository.Update and MaintenanceEntryRepository.Delete in backend/internal/data/repo/repo_maintenance_entry.go use UpdateOneID(id) and DeleteOneID(id)…
CVE-2026-48974Medium· 5.4HomeBox is a home inventory and organization system
HomeBox is a home inventory and organization system. Prior to 0.26.0, POST /v1/groups/members invokes HandleGroupMemberAdd and GroupService.AddMember using a caller-supplied userID without requiring an owner role, an invitation token, ta…