FIBAR GROUP S.A. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting FIBAR GROUP S.A. products: 1 record(s), with severity, exploitation and fixes.

Home Center 3 1 Home Center 2 1 Home Center Lite 1

Exploited only (KEV) →

CVE-2020-36905 High · 7.5 CWE-829 Jan 6, 2026

FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API

FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and potentially hijack user sessions or manipulate page content.