ZDI-CAN-28480: ZDI-26-160: (Pwn2Own) Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ed25519signopen function. The issue results from improper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system.
Other sources
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-3562.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-28480?
ZDI-CAN-28480 is considered a critical vulnerability, allowing attackers to execute arbitrary code without authentication.
How do I fix ZDI-CAN-28480?
To mitigate ZDI-CAN-28480, ensure your Philips Hue Bridge firmware is updated to the latest version provided by Philips.
Who is affected by ZDI-CAN-28480?
Users of the Philips Hue Bridge are at risk due to ZDI-CAN-28480 if their devices are not updated.
What type of attack is ZDI-CAN-28480 related to?
ZDI-CAN-28480 is related to an authentication bypass vulnerability allowing remote code execution.
Is authentication required to exploit ZDI-CAN-28480?
No, authentication is not required to exploit ZDI-CAN-28480, making it particularly dangerous.