Skip to content

CVE-2026-54317

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 24, 2026
Last Seen
June 24, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

High-Risk Vulnerabilities in Home Assistant Exposed72.0

On June 23, 2026, two critical vulnerabilities were disclosed in Home Assistant, an open-source automation platform. CVE-2026-54317 allows unauthorized access to alarm panel status and device topology via a misconfigured API endpoint. CVE-2026-54318 enables local malicious apps to spoof GPS location...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCVE-2026-54318CWE-200 - Exposure of Sensitive InformationCWE-287 - Improper AuthenticationCWE-862 - Missing Authorization