Boa vendor intelligence

Boa Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Boa products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
1
Known exploited vulnerability affecting Boa products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited vulnerability absent from CISA KEV
Sensor Observed
0
Boa KEVs with sensor-observed exploitation activity

Review Boa exploitation against the products you run

The single exploited Boa vulnerability tracked by Previdian is not in CISA KEV.

0%
Covered by CISA
100%
Beyond CISA
1
Product families

Attested Boa vulnerabilities

1 known exploited vulnerability in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2017-9833

/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privileges....

Boa Web Server High Beyond CISA 15 Jun 2026

Showing 1 of 1 on this page (1 Boa known exploited vulnerability).

Recurring weakness patterns

Limitation accounts for one mapped occurrence across this Boa KEV portfolio.

Browse all KEVs →