Likely 0-day
Detected Homebridge UI was found using default administrator credentials (admin:admin). An attacker could have gained full access to manage HomeKit accessories, plugins, and server configuration.
id: homebridge-default-login
info:
name: Homebridge - Default Admin Credentials
author: 0x_Akok
...