DO
Vendor
domoticz
8
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75520 New | DO domoticz domoticz | 5.4 | Oct 28 | Domoticz: Missing authorization and path traversal in the udevices Lua parser handler |
| CVE-2026-11425 | DO Domoticz Domoticz | 4.4 | Aug 7 | Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering |
| CVE-2026-71265 | DO domoticz domoticz | 7.5 | Aug 5 | Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy() |
| CVE-2026-1001 | DO Domoticz Domoticz | 4.8 | Mar 25 | Domoticz < 2026.1 Stored XSS via Hardware Configuration Endpoint |
| CVE-2020-21990 | MY Mydomoathome Domoticz | 7.5 | Apr 29 | Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement |
| CVE-2019-15480 | DO Domoticz Domoticz | 5.4 | Aug 23 | Domoticz 4.10717 has XSS via item.Name |
| CVE-2019-10678 | DO Domoticz Domoticz | 7.5 | Mar 31 | Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options |
| CVE-2019-10664 | DO Domoticz Domoticz | 9.8 | Mar 31 | Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp |