Tag
high
advisory
Unauthenticated Access to ESPHome Dashboard via Ingress Interface Misconfiguration
2 TTPsAn auth bypass in the ESPHome Home Assistant add-on allows unauthenticated LAN access to the dashboard due to improper interface binding, enabling remote code execution on the host.
esphome-device-builder
auth-bypass
remote-code-execution
home-assistant
esphome
2t
critical
advisory
Home Assistant Core Path Traversal Vulnerability (CVE-2026-64825)
2 TTPs 2 CVEsA critical path traversal vulnerability, CVE-2026-64825, in Home Assistant Core versions before 2026.6.0 allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive during the initial onboarding window, potentially leading to full system compromise with root privileges.
Home Assistant Core < 2026.6.0
vulnerability
path-traversal
home-assistant
rce
unauthenticated
initial-access
2t
2c