Zerodayinitiative Critical Vulnerabilities in Philips Hue Bridge Allow Code Execution
Article Content
Browse articles 
Two vulnerabilities affecting Philips Hue Bridge have been identified, allowing network-adjacent attackers to execute arbitrary code. One vulnerability (ZDI-26-159) requires authentication but can be exploited due to a bypass in the authentication mechanism, while the other (ZDI-26-154) does not require authentication, posing a significant risk to users.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
Timeline
2026-03-07
ZDI-26-159 and ZDI-26-154 vulnerabilities disclosed
More articles in this cluster (2)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…