https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:29:21.898254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33045 CVE-2026-33045 — Home Assistant has stored XSS in history-graphs 2026-10-09T09:29:21.914844+00:00

Affected: home-assistant core

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones (imported/included from Android Auto it appears) is vulnerable cross-site scripting, similar to CVE-2025-62172. Version 2026.01 fixes the issue.