ES
Product
esphome
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 1Low 0
Watch
Add esphome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27081 | 8.8 | Feb 26 | ESPHome is a system to control your ESP8266/ESP32 Affected: 2023.12.9 |
| CVE-2024-27287 | 8.7 | Mar 6 | ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems Affected: 2023.12.9 before 2024.2.2 |
| CVE-2026-71259 | 8.6 | Aug 5 | ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution Affected: through 2026.7.0 |
| CVE-2025-57808 | 8.1 | Sep 2 | ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header Affected: = 2025.8.0 |
| CVE-2026-23833 | 7.5 | Jan 19 | ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component Affected: >= 2025.9.0, < 2025.12.7 |
Showing 5