CVE-2026-73669
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Aug 13, 2026
Vendor
unknown
Description
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights.