Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 07:57:33 +0000 CVE-2026-33044 — Home Assistant has stored XSS in Map-card through malicious device name https://cve.radiocsirt.org/vuln/cve-2026-33044 <p><strong>Affected:</strong> home-assistant core</p> <p>Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2020.02 and prior to version 2026.01, an authenticated party can add a malicious name to their device entity, allowing for Cross-Site Scripting attacks against anyone who can see a dashboard with a Map-card which includes that entity. It requires that the victim hovers over an information point. Version 2026.01 fixes the issue.</p> <p><strong>Affected:</strong> home-assistant core</p> <p>Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2020.02 and prior to version 2026.01, an authenticated party can add a malicious name to their device entity, allowing for Cross-Site Scripting attacks against anyone who can see a dashboard with a Map-card which includes that entity. It requires that the victim hovers over an information point. Version 2026.01 fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-33044