CVE-2026-77062 Clickjacking in boneIO

The boneIO Black web interface lacks proper clickjacking protections. A remote attacker can embed the control panel in an iframe on a malicious web page and trick an authenticated user on the internal network into clicking buttons that activate relays, open gates, or control blinds. This can lead...

CVE-2026-77062

The boneIO Black web interface is vulnerable to a clickjacking attack due to a lack of proper UI layer protections. A remote attacker can embed the control panel within an iframe on a malicious website to trick authenticated users on the internal network into performing unintended actions, such a...