Authentication Bypass Vulnerability in Philips Hue Bridge Pro
CVE-2026-122044

8.8HIGH

Key Information:

Vendor

Philips
Status
Hue Bridge Pro
Vendor
CVE Published:
12 November 2026

What is CVE-2026-122044?

A significant vulnerability exists in the Philips Hue Bridge Pro, allowing network-adjacent attackers to bypass authentication due to the lack of an adequate protection mechanism in the HTTP service running on TCP port 443. This flaw enables unauthorized access without requiring any form of validation, exposing users to potential unauthorized control and manipulation of the device.

Affected Version(s)

Hue Bridge Pro 2071026000

References

https://www.zerodayinitiative.com/advisories/ZDI-26-892/
x_research-advisory

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.