Medium severity6.3NVD Advisory· Published Aug 13, 2026

CVE-2026-73669

Description

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Philips Hue/Bridge Pro firmwarellm-create
Mosquitto/MQTT brokerllm-create
Range: =2.0.22
Signify/Philips Hue Bridge Pro firmwarellm-create

Patches

Vulnerability mechanics

References

raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-225-01.jsonnvd
www.cve.org/CVERecordnvd
www.philips-hue.com/en-us/support/release-notes/bridge-pronvd
www.philips-hue.com/en-us/support/security-advisorynvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000