Product by Home-Assistant

    Home Assistant Core

    3 known vulnerabilities in Home Assistant Core (Home-Assistant), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Home Assistant Core (Home-Assistant)
    CriticalCVE-2026-64824

    Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore

    		8.4
    CriticalCVE-2026-64825

    Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload

    		9.3
    MediumCVE-2026-64823

    Home Assistant Core < 2026.5.4 XSS via Shelly media_player.py thumb URI

    		4.7

    All products by Home-Assistant