Critical Vulnerabilities in Philips Hue Bridge Allow Code Execution

Critical Vulnerabilities in Philips Hue Bridge Allow Code Execution

First seen 7 Mar 2026, 15:10 UTC •Zerodayinitiative •85% similarity •63.8

Article Content

Browse articles
ThreatCluster

Two vulnerabilities affecting Philips Hue Bridge have been identified, allowing network-adjacent attackers to execute arbitrary code. One vulnerability (ZDI-26-159) requires authentication but can be exploited due to a bypass in the authentication mechanism, while the other (ZDI-26-154) does not require authentication, posing a significant risk to users.

ThreatCluster AI

Timeline

2026-03-07
ZDI-26-159 and ZDI-26-154 vulnerabilities disclosed

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

HomeKit Philips Hue Bridge Zero-day Exploit