CVE-2026-77053

Vendor

BoneIO

Product

boneIO

CVSS v4.0

8.7 AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-306

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 17
   CVE NVD 5d ago

   boneIO Black firmware ships with authentication disabled by default.

   boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network interfaces and exposes all endpoints without requiring credentials. An unauthenticated remote attacker can fully…

   CVSS 8.7 Fix available CVE-2026-77053 BoneIO