Skip to content
OpenAdvisories

Vendor

sipcapture

3 known vulnerabilities.

Products

homer 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-62251

    Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

    Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of…

    sipcapture homer github.com/sipcapture/homer-app Go