Doditsolutions Homey BNB V4 is vulnerable to an unauthenticated authentication bypass via SQL injection, posing a critical risk of total administrative account compromise.

The application is susceptible to SQL injection (CWE-89) within the administration panel login interface. An unauthenticated attacker can supply crafted SQL operators, such as single quotes and logical OR statements, into the username and password fields to manipulate the authentication query and gain unauthorized access.

Successful exploitation allows an unauthenticated attacker to bypass administrative authentication, resulting in full control over the application. This level of access enables data theft, modification of sensitive rental listings, and potential compromise of the underlying server environment. With a CVSS score of 8.2, this vulnerability represents a high-severity risk to business operations and data integrity.

Immediate Action: Upgrade the Homey BNB installation to a patched version if available, or contact Doditsolutions support to obtain a security hotfix for the V4 administration module.

Proactive Monitoring: Review web server and database logs for suspicious login attempts containing SQL control characters or anomalous query patterns targeting the admin directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter malicious input at the edge before it reaches the application login endpoint.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the Exploit-DB entry 46616.

The presence of a public proof-of-concept and the ease of exploitation necessitate immediate attention to this vulnerability. Administrators should prioritize patching the affected software or applying restrictive WAF policies to prevent unauthenticated access to the administrative panel. Failing to secure this login interface exposes the entire platform to unauthorized administrative takeover.