Signify vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Signify products: 1 record(s), with severity, exploitation and fixes.

Philips Hue Bridge Pro 1

Exploited only (KEV) →

CVE-2026-73669 High · 7.3 CWE-306 Aug 13, 2026

Signify Philips Hue Bridge Pro MQTT broker missing authentication

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in 1.77.2071318010.