ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Home Assistant Green”

34 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllPolicy & legal 6Malware 5Industry 5Vulnerability 4Phishing & fraud 3Advisory 3Ransomware 2Research 2Data breach 2Exploit / PoC 1Tools 1
SeverityAllcritical 8high 7medium 7low 12info 0

ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

ZDI disclosed another Pwn2Own command injection flaw (CVSS 7.5) in Home Assistant Green's go2rtc, enabling network-adjacent code execution after obtaining localhost access.

The Zero Day Initiative published ZDI-26-560 for a second command injection remote code execution flaw in go2rtc on Home Assistant Green, demonstrated at Pwn2Own. Network-adjacent attackers can execute arbitrary code after first obtaining access to the device's localhost interface. ZDI rated the issue CVSS 7.5.

ZDI Published Advisories · Aug 12, 2026Advisory

ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

ZDI disclosed a Pwn2Own command injection flaw (CVSS 7.5) in Home Assistant Green's go2rtc, enabling network-adjacent attackers to execute arbitrary code via localhost access.

The Zero Day Initiative published ZDI-26-561 for a command injection remote code execution flaw in go2rtc on Home Assistant Green, demonstrated at Pwn2Own. Network-adjacent attackers can execute arbitrary code after first gaining access to the device's localhost interface. ZDI rated the issue CVSS 7.5.

ZDI Published Advisories · Aug 12, 2026Advisory

ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability

ZDI-26-562 details an unauthenticated, network-adjacent SSRF in the Home Assistant Green mDNS server, rated CVSS 5.4 and originally demonstrated at Pwn2Own.

A server-side request forgery in Home Assistant Green's mDNS service lets network-adjacent attackers initiate arbitrary server-side requests without authentication. The Zero Day Initiative assigned the flaw a CVSS 5.4 rating under advisory ZDI-26-562. The finding originated from Pwn2Own, and no exploitation in the wild is reported.

ZDI Published Advisories · Aug 12, 2026Vulnerability

ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability

ZDI disclosed a Pwn2Own SSRF flaw (CVSS 5.4) in Home Assistant Green's SSDP server, letting unauthenticated network-adjacent attackers trigger arbitrary server-side requests.

The Zero Day Initiative published ZDI-26-563 for a server-side request forgery in the Simple Service Discovery Protocol server on Home Assistant Green. The bug was demonstrated at Pwn2Own and allows network-adjacent, unauthenticated attackers to initiate arbitrary server-side requests on affected installations. ZDI rated the issue CVSS 5.4.

ZDI Published Advisories · Aug 12, 2026Advisory