Skip to content
OpenAdvisories

Vendor

BeWelcome

1 known vulnerabilities.

Products

Rox 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34292

    BeWelcome/Rox PHP Object Injection RCE

    Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize(): the POST parameter `formkit_memory_recovery` in \\RoxPostHandler::getC…

    BeWelcome Rox