CVE-2026-77054 | boneIO up to 1.5.x Password Storage /api/config missing encryption

October 26, 2026 Yanac

A vulnerability was found in boneIO up to 1.5.x and classified as problematic. This affects an unknown part of the file /api/config of the component Password Storage. Executing a manipulation can lead to missing encryption of sensitive data.

This vulnerability is tracked as CVE-2026-77054. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More