<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: hue bridge v2 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-3562: Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-3562.html</link><guid>https://patchthecve.com/cve/CVE-2026-3562.html</guid><pubDate>Wed, 17 Jun 2026 10:43:47 +0000</pubDate><description>HIGH 8.8: Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability.

The specific fl</description></item><item><title>CVE-2026-3561: Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-3561.html</link><guid>https://patchthecve.com/cve/CVE-2026-3561.html</guid><pubDate>Wed, 17 Jun 2026 10:43:47 +0000</pubDate><description>HIGH 8.0: Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability,</description></item><item><title>CVE-2026-3560: Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerabil</title><link>https://patchthecve.com/cve/CVE-2026-3560.html</link><guid>https://patchthecve.com/cve/CVE-2026-3560.html</guid><pubDate>Wed, 17 Jun 2026 10:43:47 +0000</pubDate><description>HIGH 8.8: Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerabil</description></item><item><title>CVE-2026-3559: Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-3559.html</link><guid>https://patchthecve.com/cve/CVE-2026-3559.html</guid><pubDate>Wed, 17 Jun 2026 10:43:47 +0000</pubDate><description>HIGH 8.1: Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability.

The specific f</description></item><item><title>CVE-2026-3558: Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-3558.html</link><guid>https://patchthecve.com/cve/CVE-2026-3558.html</guid><pubDate>Wed, 17 Jun 2026 10:43:47 +0000</pubDate><description>HIGH 8.1: Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability.

The </description></item><item><title>CVE-2026-3557: Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vu</title><link>https://patchthecve.com/cve/CVE-2026-3557.html</link><guid>https://patchthecve.com/cve/CVE-2026-3557.html</guid><pubDate>Wed, 17 Jun 2026 10:43:47 +0000</pubDate><description>HIGH 8.0: Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit th</description></item><item><title>CVE-2026-3556: Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-3556.html</link><guid>https://patchthecve.com/cve/CVE-2026-3556.html</guid><pubDate>Wed, 17 Jun 2026 10:43:46 +0000</pubDate><description>HIGH 8.8: Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability.

The spe</description></item><item><title>CVE-2026-3555: Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulner</title><link>https://patchthecve.com/cve/CVE-2026-3555.html</link><guid>https://patchthecve.com/cve/CVE-2026-3555.html</guid><pubDate>Wed, 17 Jun 2026 10:43:46 +0000</pubDate><description>HIGH 8.0: Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this vulnerab</description></item></channel></rss>