CVE-2026-3557Disclosure(philips / hue_bridge_v2)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the hap_pair_verify_handler function of the hk_hap service, which listens on TCP port 8080 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28337.

philips CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.zerodayinitiative.com/advisories/ZDI-26-155/

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hue_bridge_v2
hue_bridge_v2_firmware

Threat summary

3 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-03-06); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

philips

Products

hue_bridge_v2hue_bridge_v2_firmware

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

TheZDIBugs@TheZDIBugs216d
Disclosure
[ZDI-26-155|CVE-2026-3557] (Pwn2Own) Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.0; Credit: Viettel Cyber Security) https://www.zerodayinitiative.com/advisories/ZDI-26-155/
Post summary
A zero‑day heap‑based buffer overflow in Philips Hue Bridge’s hap_pair_verify_handler enables remote code execution; the advisory notes a CVSS score of 8.0 but provides no exploit, patch, or active exploitation details.
00020477
5.4K followersView on X
The Hacker Wire@TheHackerWire206d
Disclosure
🟠 CVE-2026-3557 - High Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbit... https://www.thehackerwire.com/vulnerability/CVE-2026-3557/ https://t.co/CFaWdmcOim
Post summary
The tweet announces CVE-2026-3557, a heap-based buffer overflow in Philips Hue Bridge that could allow remote code execution for network-adjacent attackers, but provides no PoC, exploit, or patch information.
0000056
136 followersView on X
CVE@CVEnew209d
Disclosure
CVE-2026-3557 Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent at… https://www.cve.org/CVERecord?id=CVE-2026-3557
Post summary
The text provides a concise disclosure of CVE-2026-3557, noting it is a heap-based buffer overflow that allows remote code execution, and includes the CVE record link.
00000165
56.7K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	philips	hue_bridge_v2	-	-	-
OS	philips	hue_bridge_v2_firmware	-	-	-

Explore more

Back to dashboard philips CVEs hue_bridge_v2 vulnerabilities