DO
Product
domoticz
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add domoticz to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10664 | 9.8 | Mar 31 | Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp Affected: before 4.10578 |
| CVE-2026-71265 | 7.5 | Aug 5 | Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy() Affected: 0 |
| CVE-2019-10678 | 7.5 | Mar 31 | Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options Affected: before 4.10579 |
| CVE-2026-75520 New | 5.4 | Oct 28 | Domoticz: Missing authorization and path traversal in the udevices Lua parser handler Affected: <= 2026.2 |
| CVE-2019-15480 | 5.4 | Aug 23 | Domoticz 4.10717 has XSS via item.Name Affected: 4.10717 |
| CVE-2026-1001 | 4.8 | Mar 25 | Domoticz < 2026.1 Stored XSS via Hardware Configuration Endpoint Affected: before 2026.1 |
| CVE-2026-11425 | 4.4 | Aug 7 | Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering Affected: before 2026.3 |
Showing 7