CVE-2026-118631

The Philips Hue Bridge Pro is affected by an Argument Injection vulnerability in its factory data service , which listens on TCP port 5001 by default. The root cause is the lack of proper validation of a user-supplied string before it is used to execute a system call. This allows a local attacker...