Advisories · Technology
domoticz.
Every CVE that names domoticz among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Domoticz: Missing authorization and path traversal in the udevices Lua parser handler
- domoticz
- Path traversal
- Broken access control
- CVSS 2.0 Low
Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
- Domoticz
- Cross-site scripting (XSS)
- CVSS 7.5 High
Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()
- domoticz
- Memory corruption
- CVSS 4.8 Medium
Domoticz < 2026.1 Stored XSS via Hardware Configuration Endpoint
- Domoticz
- Cross-site scripting (XSS)