Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-62251 · Microsoft / collected KEV context

EUVD-2026-94522

GHSA-f46q-3v67-fmm4

GO-2026-6672

cve-program · CVE-2026-62251

• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer/releases/tag/11.0.283

euvd · EUVD-2026-94522

• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer/releases/tag/11.0.283

nvd · CVE-2026-62251

• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/releases/tag/11.0.283
• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4

osv · GHSA-f46q-3v67-fmm4

• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer
• https://github.com/sipcapture/homer/releases/tag/11.0.283

osv · GO-2026-6672

• https://github.com/sipcapture/homer/security/advisories/GHSA-f46q-3v67-fmm4
• https://github.com/sipcapture/homer/commit/a7d027dc684b210b62285c49f555ac88d64f35f0
• https://github.com/sipcapture/homer/pull/837
• https://github.com/sipcapture/homer/releases/tag/11.0.283

No related operational record is retained in the current change model.