Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

esphome — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in esphome, with AI-generated Chinese analysis, references, and POCs.

Vendor: esphome

CVE IDTitleCVSSSeverityPublished
CVE-2026-71260 ESPHome web_server Plaintext Password Disclosure via JSON "value" Field CWE-522 6.5 Medium2026-08-05
CVE-2026-71259 ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution CWE-184 8.6 High2026-08-05
CVE-2026-23833 ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component CWE-190 8.6AIHighAI2026-01-19
CVE-2025-57808 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header CWE-303 8.1 High2025-09-02
CVE-2024-29019 ESPHome vulnerable to Authentication bypass via Cross site request forgery CWE-352 8.1 High2024-03-21
CVE-2024-27287 ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API CWE-79 6.5 Medium2024-03-06
CVE-2024-27081 ESPHome remote code execution via arbitrary file write CWE-22 7.2 High2024-02-26
CVE-2021-41104 web_server allows OTA update without checking user defined basic auth username & password CWE-306 7.5 High2021-09-28

All 8 known CVE vulnerabilities affecting esphome with full Chinese analysis, references, and POCs where available.