PT-2026-147245

Pwn2Own Philips Hue Bridge HomeKit Authentication Bypass Vulnerability...

PT-2026-147243

Pwn2Own Philips Hue Bridge HomeKit Accessory Protocol chacha20 decrypt Integer Underflow Remote Code Execution Vulnerability...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — Firmware Reverse Engineering A 20 MHz function generator from about 1994, taken apart in software: two EPROM dumps, an 8051 emulator used as a measuring instrument, and 35 sections of documentation where every single claim is backed by a listing address, an emulator measurement, ...

CVE-2026-122044

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

CVE-2026-118631

Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target...

CVE-2026-118632

Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing...

EUVD-2026-124165

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

CVE-2026-122044

The Philips Hue Bridge Pro is affected by a Protection Mechanism Failure (CWE-693) that allows for an authentication bypass . The vulnerability is located within the HTTP service , which listens on TCP port 443 by default. A network-adjacent attacker can exploit this flaw to bypass authentication...

CVE-2026-122044 Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

EUVD-2026-124164

Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing...

CVE-2026-118632 Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability

Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing...

CVE-2026-118632

The Philips Hue Bridge Pro is vulnerable to a SQL Injection flaw in its HTTP service (defaulting to TCP port 443 ). The root cause is the lack of proper validation of user-supplied strings during SQL query construction. This allows network-adjacent attackers to bypass authentication and execute a...

CVE-2026-118631

The Philips Hue Bridge Pro is affected by an Argument Injection vulnerability in its factory data service , which listens on TCP port 5001 by default. The root cause is the lack of proper validation of a user-supplied string before it is used to execute a system call. This allows a local attacker...

CVE-2026-118631 Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability

Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target...

EUVD-2026-124163

Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target...

CVE-2026-118631: Philips Hue Bridge Pro: Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability

Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target...

CVE-2026-118632: Philips Hue Bridge Pro: Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability

Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing...

CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific fl...

PT-2026-138491

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge Pro affected versions not specified Description A flaw in the factory data service, which listens on TCP port 5001 by default, allows local attackers to modify files on the system. The issue occurs because the service fails ...

PT-2026-138494

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge Pro affected versions not specified Description A failure in the protection mechanism of the HTTP service, which typically listens on TCP port 443, allows network-adjacent attackers to bypass authentication. This flaw enable...