Go/github.com/sipcapture/homer-app CVE-2026-62252: critical 9.8

Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

Action: Upgrade github.com/sipcapture/homer-app to 0.0.0-20260625091610-b2e942031ff8 or later.

go get github.com/sipcapture/homer-app@v0.0.0-20260625091610-b2e942031ff8

Affected

Fixed versions

Sources

• osv: GHSA-6xp5-7rcx-xfgx
• https://github.com/sipcapture/homer/security/advisories/GHSA-6xp5-7rcx-xfgx
• https://github.com/sipcapture/homer/pull/838
• https://github.com/sipcapture/homer/commit/b2e942031ff8cd7435a244ebef306ee97d16b809
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer/releases/tag/11.0.283

CVE-2026-62252 · published 2026-10-07T16:12:02Z · modified 2026-10-20T00:55:38.909531918Z · JSON