HB
Product
Hue Bridge V2 Firmware
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 0Low 0
Watch
Add Hue Bridge V2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3562 | 8.8 | Mar 13 | Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability Affected: before 1975170000 |
| CVE-2026-3560 | 8.8 | Mar 13 | Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1975170000 |
| CVE-2026-3556 | 8.8 | Mar 13 | Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1975170000 |
| CVE-2026-3559 | 8.1 | Mar 13 | Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability Affected: before 1975170000 |
| CVE-2026-3558 | 8.1 | Mar 13 | Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability Affected: before 1975170000 |
| CVE-2026-3561 | 8.0 | Mar 13 | Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1975170000 |
| CVE-2026-3557 | 8.0 | Mar 13 | Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1975170000 |
| CVE-2026-3555 | 8.0 | Mar 13 | Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 1975170000 |
| CVE-2020-6007 | 7.9 | Jan 23 | Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase,… Affected: through 1935144020 |
Showing 9
