VendorsPhilipshue_bridge_v2_firmwareany version
Vulnerabilities

Philips Hue Bridge V2 Firmware any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2026-3556
Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2026-03-13 · Analyzed
8.8EPSS 0.005
CVE-2026-3560
Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2026-03-13 · Analyzed
8.8EPSS 0.005
CVE-2026-3562
Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability
Published 2026-03-13 · Analyzed
8.8EPSS 0.003
CVE-2026-3558
Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability
Published 2026-03-13 · Analyzed
8.1EPSS 0.004
CVE-2026-3559
Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability
Published 2026-03-13 · Analyzed
8.1EPSS 0.004
CVE-2026-3557
Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2026-03-13 · Analyzed
8.0EPSS 0.005
CVE-2026-3561
Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2026-03-13 · Analyzed
8.0EPSS 0.005
CVE-2026-3555
Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2026-03-13 · Analyzed
8.0EPSS 0.004
CVE-2020-6007
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.
Published 2020-01-23 · Modified
7.9EPSS 0.021