NavBox vulnerabilities

2 known vulnerabilities in NavBox from Navtor. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  NavBox: Missing Authentication for Critical Functionality

  CVE-2026-2754Mar 6, 2026Navtor

  Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated remote attacker with network access to the device can execute HTTP GET requests to TCP port 8080 to retrieve internal net

• 7.5 High severity

  NavBox: Absolute Path Traversal

  CVE-2026-2753Mar 6, 2026Navtor

  An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize user-supplied path input. Unauthenticated remote attackers can exploit this issue by submitting requests containing absolu