Sourcefabric Phoniebox — known CVE vulnerabilities

Every CVE whose affected-product data names Sourcefabric Phoniebox, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2024-41369 — CVSS 9.8 (critical): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php
• CVE-2024-41361 — CVSS 9.8 (critical): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php
• CVE-2024-41364 — CVSS 9.8 (critical): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php
• CVE-2024-41366 — CVSS 9.8 (critical): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php
• CVE-2024-41367 — CVSS 9.8 (critical): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.p…
• CVE-2024-41368 — CVSS 9.8 (critical): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php
• CVE-2025-63951 — CVSS 7.5 (high): An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit…
• CVE-2024-0714 — CVSS 6.3 (medium): A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0. It has been rated as critical. Affected by this issue is some unknown…