https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:55:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-355254 EUVD-2026-355254 https://cve.radiocsirt.org/vuln/euvd-2026-355254 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73669 <p>The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in 1.77.2071318010.</p> <p>The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in 1.77.2071318010.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73669 https://cve.radiocsirt.org/vuln/ghsa-43qc-c2gq-5fq2 <p>The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge&#39;s network can read device data and control connected lights.</p> <p>The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge&#39;s network can read device data and control connected lights.</p> https://cve.radiocsirt.org/vuln/ghsa-43qc-c2gq-5fq2