https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:56:05.589073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-355254 EUVD-2026-355254 2026-10-08T21:56:05.591236+00:00 EUVD-2026-355254 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73669 fkie_cve-2026-73669 2026-10-08T21:56:05.591287+00:00

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in 1.77.2071318010.

 https://cve.radiocsirt.org/vuln/ghsa-43qc-c2gq-5fq2 GHSA-43qc-c2gq-5fq2 2026-10-08T21:56:05.591321+00:00

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights.