CVE-2026-77057 | boneIO Black up to 1.5.x Web Login/SSH Authentication /api/login improper authorization

October 26, 2026 Yanac

A vulnerability was found in boneIO Black up to 1.5.x. It has been declared as very critical. Affected by this issue is some unknown functionality of the file /api/login of the component Web Login/SSH Authentication. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-77057. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More