[ Vendor · 3 CVEs ]
sipcapture
CVEs affecting sipcapture published in the last 30 days, plus any sipcapture CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62251 | 7 Oct 2026 | CVSS 8.1 | Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/queryHomer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery`… | Fix |
| CVE-2026-62252 | 7 Oct 2026 | CVSS 9.8 | Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First LoginHomer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the… | Fix |
| CVE-2026-62253 | 7 Oct 2026 | CVSS 9.8 | Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`)… | Fix |