Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/09/02 12:26 a.m.11 views

CVE-2025-57808 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correc...

8.1CVSS0.01514EPSS
SaveExploits1References2
Rows per page
Query Builder