PatchTheCVEsourcefabric vulnerabilities
Recent CVEs affecting sourcefabric products. 16 tracked.
sourcefabric has 16 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-12-18. Highest priority: CVE-2024-41369 (score 60/100).
- CVE-2025-63951 HIGH 7.5 UPGRADE An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID pr
- CVE-2025-10370 LOW 3.5 UPGRADE A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10369 LOW 3.5 UPGRADE A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10368 LOW 3.5 UPGRADE A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10367 LOW 3.5 UPGRADE A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10366 LOW 3.5 UPGRADE A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10328 MEDIUM 6.3 UPGRADE A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10327 MEDIUM 6.3 UPGRADE A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2025-10326 MEDIUM 6.3 UPGRADE A security flaw has been discovered in MiczFlor RPi-Jukebox-RFID up to 2.8.0
- CVE-2024-41369 CRITICAL 9.8 DOWNGRADE RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.s
- CVE-2024-41368 CRITICAL 9.8 DOWNGRADE RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.s
- CVE-2024-41367 CRITICAL 9.8 DOWNGRADE RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\p
- CVE-2024-41366 CRITICAL 9.8 DOWNGRADE RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userS
- CVE-2024-41364 CRITICAL 9.8 DOWNGRADE RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\track
- CVE-2024-41361 CRITICAL 9.8 DOWNGRADE RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manag
- CVE-2024-0714 MEDIUM 6.3 UPGRADE A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0
FAQ
How do I fix sourcefabric vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sourcefabric being exploited right now?
None of the tracked sourcefabric CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sourcefabric CVE should I patch first?
CVE-2024-41369 currently ranks highest (60/100): RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.s.