CyberSecBulletin

BeWelcome vulnerabilities

We track 1 vulnerability in BeWelcome products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2025.

1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score

Latest BeWelcome vulnerabilities

  • 9.4 Critical severity

    Rox: Deserialization of Untrusted Data

    CVE-2025-34292BeWelcome

    Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize(): the POST parameter `formkit_memory_recovery` in \\RoxPostHandler::getCa