CVE-2026-77061

Vendor

BoneIO

Product

boneIO

CVSS v4.0

5.3 AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-306

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 10
   CVE NVD 5d ago

   boneIO Black directly excludes several API endpoints from the authentication.

   boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated remote attacker on the local network can retrieve system logs, firmware version, serial number, MQTT username, configuration file…

   CVSS 5.3 Fix available CVE-2026-77061 BoneIO