black_debian_images vulnerabilities

2 known vulnerabilities in black_debian_images from boneIO. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  black_debian_images: Use of Default Credentials

  CVE-2026-77056Oct 26, 2026boneIO

  boneIO black_debian_images ships with a Mosquitto MQTT broker that uses the same default credentials on all devices. These credentials are publicly documented on github, and there is no indication in the instructions to change them. A remote attacker can use t

• 9.3 Critical severity

  black_debian_images: Incorrect Privilege Assignment

  CVE-2026-77055Oct 26, 2026boneIO

  boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. A local attacker who compromises the boneio user can use these privileges to escalate to root. This is