CVE-2026-33268
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Mar 25, 2026
Vendor
unknown
Description
Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads. A remote, unauthenticated attacker can upload firmware files on the device and consume storage resources. Fixed in 12.3.6.