VYPR

maku-boot

by Makunet

CVEs (1)

  • CVE-2026-110123HigOct 13, 2026
    risk 0.46cvss 7.1epss —

    Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve…