Vulnerabilidades de Signify
CVEs publicadas que afetam produtos de Signify: 1 registro(s), com severidade, exploração e correções.
CVE-2026-73669
Alta · 7.3
CWE-306 13/08/2026
Signify Philips Hue Bridge Pro MQTT broker missing authentication
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in 1.77.2071318010.