CVE-2026-77062

Vendor

BoneIO

Product

boneIO

CVSS v4.0

6.9 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.003 (p26)

Weakness

CWE-1021

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 17
   Advisory CERT Polska 5d ago

   Vulnerabilities in boneIO products

   CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.

   CVE-2026-77052CVE-2026-77062
2. 10
   CVE NVD 5d ago

   The boneIO Black web interface lacks proper clickjacking protections.

   The boneIO Black web interface lacks proper clickjacking protections. A remote attacker can embed the control panel in an iframe on a malicious web page and trick an authenticated user on the internal network into clicking…

   CVSS 6.9 Fix available CVE-2026-77062 BoneIO