Most recent entries from all

fkie_cve-2026-80254

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

GHSA-hc97-2jfm-wf2q

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

jvndb-2026-000127

ShizenBox2 provided by Shizen Connect Inc. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/1263.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/639.html' target='_blank'></a><ul><li>Improper physical access control (CWE-1263) - CVE-2026-80253</li><li>Authorization bypass through user-controlled key (CWE-639) - CVE-2026-80254</li></ul>CVE-2026-80253 Naohide Waguri of PwC Consulting LLC reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-80254 Raaqim Mohammed of PwC Consulting LLC reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.