genieacs (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package genieacs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-46704 — CVSS 9.8 (critical): In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument…
• CVE-2025-56015 — CVSS 7.5 (high): In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.