Philips Hue Bridge Pro flaw lets adjacent attackers bypass authentication
ZDI rates CVE-2026-122044 at CVSS 8.8 and says no authentication is required to exploit it.
58
ZDI rates CVE-2026-122044 at CVSS 8.8 and says no authentication is required to exploit it.
ZDI rates CVE-2026-118631 at CVSS 3.8 and requires low-privileged code inside a container first.
Network-adjacent attackers can bypass required authentication; ZDI rates CVE-2026-118632 at CVSS 8.0.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 777 reads · all time 189K views