Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Template Processing. The manipulation leads to improper neutralization of special elements used in a template engine. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Upgrading to version 0.9.8-hotfix1 and 0.9.8 will fix this issue. The identifier of the patch is deeac6a4a7aba86ce99c4bda37142e41d209293e. It is recommended to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-19929 Template Engine Vulnerability in OpenBoxes Up To 0.9.6 Allows Remote Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19929
Post summary
The post announces a template engine vulnerability in OpenBoxes (up to 0.9.6) that permits remote attacks, without mentioning PoCs, exploits, patches, or active exploitation.
OpenBoxes 0.9.8: Διόρθωση της CVE-2026-19929 στα πρότυπα Zebra https://secn.ws/Yg5pUv
Post summary
OpenBoxes 0.9.8 includes a fix for CVE-2026-19929, indicating the vulnerability has been addressed.