BO
Product
boneIO
8
CVEs
0
On KEV
8.8
Max CVSS
8
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch
Add boneIO to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77059 New | 8.8 | Oct 26 | TOCTOU Race Condition in boneIO Affected: 1.3.0 before 1.6.0 |
| CVE-2026-77053 New | 8.7 | Oct 26 | Missing Authentication in Default Configuration in boneIO Affected: 1.0.0 before 1.6.0 |
| CVE-2026-77052 New | 8.7 | Oct 26 | Missing Authentication for Node-RED in boneIO Affected: 1.3.0 before 1.6.0 |
| CVE-2026-77062 New | 6.9 | Oct 26 | Clickjacking in boneIO Affected: 1.2.0 before 1.6.0 |
| CVE-2026-77054 New | 6.9 | Oct 26 | Cleartext Storage of Sensitive Information in boneIO Affected: 1.2.0 before 1.6.0 |
| CVE-2026-77061 New | 5.3 | Oct 26 | Missing Authentication for Critical Function in boneIO Affected: 1.2.0 before 1.6.0 |
| CVE-2026-77058 New | 5.1 | Oct 26 | Cross-Site Request Forgery (CSRF) in boneIO Affected: 1.2.0 before 1.6.0 |
| CVE-2026-77057 New | 2.3 | Oct 26 | Improper Restriction of Excessive Authentication Attempts in boneIO Affected: 1.2.0 before 1.6.0 |
Showing 8