CVE-2026-73669: Philips Hue Bridge Pro MQTT broker missing authentication
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable MQTT anonymous access for the embedded Mosquitto broker so that unauthenticated clients cannot connect.
Signify Philips Hue Bridge Pro embedded Mosquitto MQTT broker anonymous access = disabled - Configuration
Configure the embedded Mosquitto MQTT broker to listen only on the required interface(s) instead of all network interfaces.
Signify Philips Hue Bridge Pro embedded Mosquitto MQTT broker listener binding (all network interfaces) = restricted to trusted interface(s) only - Compensating control
Restrict network access to the Philips Hue Bridge Pro embedded Mosquitto MQTT broker so it is not reachable from the Bridge network; apply firewall rules to limit the broker port to only trusted management hosts/networks.