Case Sensitivity Flaw in HomeBox User Registration Process by SysAdminsMedia

CVE-2026-85287

What is CVE-2026-85287?

A security flaw exists in HomeBox, a home inventory and organization system, where the email addresses in the user registration process are treated as case-sensitive. This discrepancy allows an unauthenticated attacker to register an account using a variant of a victim's email with different casing, thus creating duplicate entries. As a result, both accounts are rendered inaccessible due to login failures, violating the system's one-account-per-email policy. This vulnerability is addressed in version 0.27.0.

References