[ Vendor · 2 CVEs ]
home-assistant
CVEs affecting home-assistant published in the last 30 days, plus any home-assistant CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-91129 | 22 Sep 2026 | CVSS 5.4 | Home Assistant: mDNS Server-Side Request ForgeryHome Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automatically… | Fix |
| CVE-2026-91130 | 22 Sep 2026 | CVSS 9.3 | Home Assistant: XSS in Statistics Graph CardHome Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in… | Fix |