{"id":"EUVD-2026-94522","enisaUuid":"fde41795-9c34-32ea-a12c-6045ae700220","description":"Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user can execute arbitrary SQL statements against all data accessible through the FlightSQL service. Version 11.0.283 patches the issue.","datePublished":"Oct 7, 2026, 4:09:41 PM","dateUpdated":"Oct 7, 2026, 10:05:52 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4\nhttps://github.com/sipcapture/homer/pull/837\nhttps://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0\nhttps://github.com/sipcapture/homer/releases/tag/11.0.283\n","aliases":"CVE-2026-62251\nGHSA-f46q-3v67-fmm4\n","assigner":"GitHub_M","epss":0.34,"enisaIdProduct":[{"id":"41cbbad3-baf4-377a-8316-8eba84b80151","product":{"name":"homer","vendor":{"name":"sipcapture"}},"product_version":"\u003c 11.0.283"}],"enisaIdVendor":[{"id":"f48d6a73-84d4-32cd-af58-5dde26854aa2","vendor":{"name":"sipcapture"}}],"enisaIdVulnerability":[{"id":"89c8a1be-3026-374b-8638-f9d659a358cd","vulnerability":{"id":"CVE-2026-62251","description":"Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user can execute arbitrary SQL statements against all data accessible through the FlightSQL service. Version 11.0.283 patches the issue.","datePublished":"Oct 7, 2026, 4:09:41 PM","dateUpdated":"Oct 7, 2026, 10:05:52 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4\nhttps://github.com/sipcapture/homer/pull/837\nhttps://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0\nhttps://github.com/sipcapture/homer/releases/tag/11.0.283\n","enisa_id":"EUVD-2026-94522\n","assigner":"GitHub_M","epss":0.34,"dataProcessed":"Oct 30, 2026, 7:14:57 AM","vulnerabilityProduct":[{"id":"7d224565-cde7-3dd6-a5d2-aec8111ae0d7","product":{"name":"homer","vendor":{"name":"sipcapture"}},"product_version":"\u003c 11.0.283"}],"vulnerabilityVendor":[{"id":"cf585b3b-df4e-39e2-be88-191ab2fbae37","vendor":{"name":"sipcapture"}}]}},{"id":"c410612b-926a-3042-9885-abdd7703e931","vulnerability":{"id":"GHSA-f46q-3v67-fmm4","description":"Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query","datePublished":"Oct 7, 2026, 4:13:08 PM","dateUpdated":"Oct 7, 2026, 4:13:08 PM","baseScore":0.0,"references":"https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4\nhttps://github.com/sipcapture/homer/pull/837\nhttps://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0\nhttps://github.com/sipcapture/homer\nhttps://github.com/sipcapture/homer/releases/tag/11.0.283\n","enisa_id":"EUVD-2026-94522\n","aliases":"CVE-2026-62251\nGHSA-f46q-3v67-fmm4\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:02:26 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}