All 2 CVE vulnerabilities found in device-builder, with AI-generated Chinese analysis, references, and POCs.
Vendor: esphome
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-59177 | ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces CWE-1327 | 8.8 | High | 2026-10-28 |
| CVE-2026-59178 | ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade CWE-306 | 9.8 | Critical | 2026-09-14 |
All 2 known CVE vulnerabilities affecting device-builder with full Chinese analysis, references, and POCs where available.