ZDI-26-965: (Pwn2Own) Philips Hue Bridge Home Kit Observable Discrepancy Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following...