Skip to content

CVE-2026-44698

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 1, 2026
Last Seen
June 1, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in Home Assistant Apps Allows User Takeover72.0

A security vulnerability in the Home Assistant companion apps for Android and iOS allows attackers to intercept access tokens, enabling full control over user instances. The flaw, identified as CVE-2026-44698, has a CVSS score of 8.3, indicating a high risk. Attackers can exploit this vulnerability...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-200 - Exposure of Sensitive InformationCWE-79 - Cross-site Scripting (xss)CWE-94 - Code InjectionT1567 - Exfiltration Over Web ServiceT1041 - Exfiltration Over C2 ChannelT1059.007 - JavaScriptIOSAndroid