CVE-2022-22845: Qxip Homer Webapp

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations.

Affected products

• Qxip Homer Webapp: before 1.4.28 (fixed in 1.4.28)

Published 2022-01-10. Last modified 2026-06-17.