CVE-2026-3558Disclosure(philips / hue_bridge_v2)

LOWCVSS 8.1 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the HomeKit Accessory Protocol service, which listens on TCP port 8080 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-28374.

philips CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.zerodayinitiative.com/advisories/ZDI-26-156/

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hue_bridge_v2
hue_bridge_v2_firmware

Threat summary

Public PoC is present in monitored signal
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-03-06); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

philips

Products

hue_bridge_v2hue_bridge_v2_firmware

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

TheZDIBugs@TheZDIBugs215d
Disclosure
[ZDI-26-156|CVE-2026-3558] (Pwn2Own) Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability (CVSS 8.1; Credit: Ho Xuan Ninh (@Xuanninh1412) and Hoang Hai Long (@seadragnol) from Qrious Secure (@qriousec)) https://www.zerodayinitiative.com/advisories/ZDI-26-156/
Post summary
The advisory announces CVE-2026-3558, an authentication bypass vulnerability in Philips Hue Bridge HomeKit Accessory Protocol with a CVSS score of 8.1, and provides a link to the Zero Day Initiative for further details.
00020469
5.4K followersView on X
The Hacker Wire@TheHackerWire205d
Disclosure
🟠 CVE-2026-3558 - High Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affec... https://www.thehackerwire.com/vulnerability/CVE-2026-3558/ https://t.co/l1S3dSpCIF
Post summary
The tweet announces CVE-2026-3558, an authentication bypass in Philips Hue Bridge's HomeKit feature, and links to a vulnerability article. No proof‑of‑concept, exploit code, patch, or evidence of active exploitation is provided.
0000063
136 followersView on X
CVE@CVEnew208d
Disclosure
CVE-2026-3558 Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass… https://www.cve.org/CVERecord?id=CVE-2026-3558
Post summary
The text announces the existence of CVE-2026-3558, an authentication bypass in Philips Hue Bridge’s HomeKit Accessory Protocol, and links to the CVE record.
00000167
56.7K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	philips	hue_bridge_v2	-	-	-
OS	philips	hue_bridge_v2_firmware	-	-	-

Explore more

Back to dashboard philips CVEs hue_bridge_v2 vulnerabilities