What’s Vulnerable › Products

Philips Hue Bridge vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Philips Hue Bridge version is affected

Latest Philips Hue Bridge vulnerabilities

• CVE-2026-3562 — Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability (CVSS 8.8)
• CVE-2026-3561 — Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
• CVE-2026-3560 — Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-3559 — Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability (CVSS 8.1)
• CVE-2026-3558 — Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability (CVSS 8.1)
• CVE-2026-3557 — Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
• CVE-2026-3556 — Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-3555 — Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0)
• CVE-2020-6007 — (CVSS 7.9)