VYPR

Govee cloud-connected devices

by Govee

CVEs (1)

  • CVE-2025-10910CriDec 18, 2025
    risk 0.60cvss epss 0.00

    A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s account. The…