Shizen Connect Inc. vulnerabilities
Published CVEs affecting Shizen Connect Inc. products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-80254
Medium · 6.5
CWE-639 Sep 3, 2026
Authorization Bypass Through User-Controlled Key (IDOR) in Shizen Connect Inc. ShizenBox2 (edge-app)
Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.
CVE-2026-80253
Medium · 6.8
CWE-1263 Sep 3, 2026
An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited…
An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without authentication.