Products: 2
    Vulnerabilities: 8
    Known Exploited: 0
    0
    Critical Level Threats
    6
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-71260

    ESPHome web_server Plaintext Password Disclosure via JSON "value" Field

    Last Modified: Aug 10, 2026
    Published: Aug 05, 2026

    CVE-2026-71259

    ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution

    Last Modified: Aug 10, 2026
    Published: Aug 05, 2026

    CVE-2026-23833

    ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

    Last Modified: Apr 18, 2026
    Published: Jan 19, 2026

    CVE-2025-57808

    ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

    Last Modified: Sep 10, 2025
    Published: Sep 02, 2025

    CVE-2024-29019

    ESPHome vulnerable to Authentication bypass via Cross site request forgery

    Last Modified: Apr 15, 2026
    Published: Mar 21, 2024
    Items Per Page
    Esphome Vulnerabilities & Security CVEs | CVE-DB