CVE-2026-75520

The home automation system Domoticz (prior to version 2026.3 ) contains a missing authorization and path traversal vulnerability in the udevices JSON command handler (Cmd_UpdateDevices in main/WebServerCmds.cpp). Because this handler fails to perform a session.rights check, a low-privilege authen...