CVE-2026-80254

MediumCVSS 6.5

Published: 03/09/2026(UTC)Updated: 03/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

Risk Assessment

An attacker with account access can change other users' passwords, potentially leading to account takeover and system integrity compromise.

Recommendation

Update ShizenBox2 to a patched version. Restrict access to the product and monitor password changes.

Other vulnerabilities in ShizenBox2

CVE-2026-80253Medium
An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without authentication.

Original NVD description (English source)

Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS