esphome device-builder vulnerabilities
2 published CVEs name esphome device-builder among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-59177
ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
esphome · device-builder
High8.8 - CVE-2026-59178
ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade
esphome · device-builder
Critical9.8