VulnSocial

CVE-2026-59177Patch

LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-10); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-10: 1Mentions · 2026-09-15: 1PoC Mentioned / Linked · 2026-09-15: 1Patch / Workaround · 2026-09-10: 1Technical Details · 2026-09-10: 1Technical Details · 2026-09-15: 109-1009-15
Signal classification2 categories
Patch
150.0%
Disclosure
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-101
Patch1
2026-09-151
Disclosure1
Full discourse2 posts
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2026-59177 - high 🚨 ESPHome Device Builder <1.0.10 - Unauthenticated Dashboard Access > ESPHome Device Builder versions before 1.0.10 bind the trusted Home Assistant ingress... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-59177 @pdnuclei #NucleiTemplates #cve

    Post summary

    The tweet announces CVE-2026-59177, a high-severity unauthenticated dashboard access vulnerability in ESPHome Device Builder versions before 1.0.10, and provides a link to further details.

    00032271
    1.3K followersView on X
  • Bussio28Team 🌐 Ciberseguridad práctica@Bussio28Team
    Patch

    ⚠️ Nueva vulnerabilidad en ESPHome Device Builder: CVE-2026-59177, CVSS 8.8. ¿Qué sucede? El panel podía quedar accesible desde la red local sin autenticación por una configuración incorrecta del servicio. ¿Por qué importa? Desde ese panel se pueden ejecutar acciones con bastante impacto sobre Home Assistant y los dispositivos ESPHome. 🛡️¿Podemos hacer algo? Actualizar a ESPHome Device Builder 1.0.10 o superior. Si no puedes hacerlo todavía, bloquear el puerto de ingress mediante firewall y limitarlo únicamente al propio host de Home Assistant. 🌐 Una red local tampoco debe considerarse automáticamente segura. #B28 #Ciberseguridad

    Post summary

    CVE‑2026‑59177 is a local‑network authentication‑bypass flaw in ESPHome Device Builder with a CVSS score of 8.8; users are advised to update to 1.0.10+ or restrict ingress traffic via firewall.

    0001154
    133 followersView on X

Explore more

Back to dashboard