CVE-2025-1214

CVE-2025-1214 affects pihome-shc PiHome 2.0, specifically the Role-Based Access Control component. The vulnerability resides in an issue with the /user_accounts.php?uid endpoint, enabling missing authorization and potentially allowing remote exploitation. Several sources confirm that exploitation...

CVE-2025-1214 pihome-shc PiHome Role-Based Access Control user_accounts.php authorization

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /useraccounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit h...