What’s Vulnerable › Products

home-assistant Home Assistant Core vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your home-assistant Home Assistant Core version is affected

Latest home-assistant Home Assistant Core vulnerabilities

• CVE-2026-64825 — Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload (CVSS 9.3)
• CVE-2026-64824 — Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore (CVSS 8.4)
• CVE-2026-64823 — Home Assistant Core < 2026.5.4 XSS via Shelly media_player.py thumb URI (CVSS 4.7)