CVE-2026-48826 HomeBox: broken access control lets a group member wipe another group's inventory via X-Tenant header. CVSS 8.1. Patch still under review, so update to 0.26.0 when it lands. https://www.valtersit.com/cve/CVE-2026-48826/ #CVE #infosec #HomeBox
