CVE-2026-116680 | sysadminsmedia Homebox up to 0.26.x Notifier /api/v1/notifiers/test ValidateNotifierURL server-side request forgery

October 27, 2026 Yanac

A vulnerability described as critical has been identified in sysadminsmedia Homebox up to 0.26.x. This issue affects the function ValidateNotifierURL of the file /api/v1/notifiers/test of the component Notifier. The manipulation results in server-side request forgery.

This vulnerability is known as CVE-2026-116680. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More