CVE-2026-116845

A flaw was found in NetBox. An access control vulnerability in the bulk component creation interface allows an authenticated remote attacker to bypass authorization checks on parent devices and virtual machines VMs. By submitting arbitrary device or VM identifiers to BulkComponentCreateView, an...