esphome Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by esphome

JSON RSS CSV 🔔 Create Alert Trigger

5 August 2026

Operator Precedence Flaw in ESPHome Configuration Validation
CVE-2026-71259
EsphomeEsphome8.6HIGH

2 September 2025

Authentication Flaw in ESPHome Web Server by Espressif Systems
CVE-2025-57808
EsphomeEsphome8.1HIGH

11 April 2024

Cross-Site Request Forgery (CSRF) Vulnerability in ESPHome Allowing Remote Attackers to Bypass Authentication and Perform Operations on Configuration Files
CVE-2024-29019
EsphomeEsphome8.1HIGH

26 February 2024

Remote Code Execution Vulnerability in ESPHome Dashboard Component
CVE-2024-27081
EsphomeEsphome8.8HIGH

28 September 2021

web_server allows OTA update without checking user defined basic auth username & password
CVE-2021-41104
EsphomeEsphome7.5HIGH