agentprime: home-assistant-coreEvery new CVE for home-assistant-core.https://agentprime.io/CVE-2026-66061: Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmation, enabling silent automation executionhttps://agentprime.io/advisories/CVE-2026-66061/https://agentprime.io/advisories/CVE-2026-66061/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 20:43:41 GMTCVECVE-2026-66060: Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation execution by untrusted callershttps://agentprime.io/advisories/CVE-2026-66060/https://agentprime.io/advisories/CVE-2026-66060/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 20:35:47 GMTCVECVE-2026-59717: Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishinghttps://agentprime.io/advisories/CVE-2026-59717/https://agentprime.io/advisories/CVE-2026-59717/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 20:19:14 GMTCVECVE-2026-55844: Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor datahttps://agentprime.io/advisories/CVE-2026-55844/https://agentprime.io/advisories/CVE-2026-55844/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2026 14:19:11 GMTCVECVE-2026-54318: Home Assistant: Exported BroadcastReceiver allows local apps to spoof device locationhttps://agentprime.io/advisories/CVE-2026-54318/https://agentprime.io/advisories/CVE-2026-54318/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 17:40:28 GMTCVECVE-2026-44698: Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injectionhttps://agentprime.io/advisories/CVE-2026-44698/https://agentprime.io/advisories/CVE-2026-44698/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 13:32:20 GMTCVECVE-2023-41894: Local-only webhooks externally accessible via SniTun in Home Assistant Corehttps://agentprime.io/advisories/CVE-2023-41894/https://agentprime.io/advisories/CVE-2023-41894/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 23:23:17 GMTCVECVE-2023-41895: Cross-site Scripting via auth_callback login in Home Assistant Corehttps://agentprime.io/advisories/CVE-2023-41895/https://agentprime.io/advisories/CVE-2023-41895/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 22:37:23 GMTCVECVE-2023-41896: Fake websocket server installation permits full takeover in Home Assistant Corehttps://agentprime.io/advisories/CVE-2023-41896/https://agentprime.io/advisories/CVE-2023-41896/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 22:30:49 GMTCVECVE-2023-41897: Lack of XFO header allows clickjacking in Home Assistant Corehttps://agentprime.io/advisories/CVE-2023-41897/https://agentprime.io/advisories/CVE-2023-41897/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 22:23:32 GMTCVECVE-2023-41899: Partial Server-Side Request Forgery in Home Assistant Corehttps://agentprime.io/advisories/CVE-2023-41899/https://agentprime.io/advisories/CVE-2023-41899/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 22:18:31 GMTCVECVE-2023-41898: Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Androidhttps://agentprime.io/advisories/CVE-2023-41898/https://agentprime.io/advisories/CVE-2023-41898/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 22:08:40 GMTCVECVE-2023-44385: Client-Side Request Forgery in Home Assistant iOS/macOS native Appshttps://agentprime.io/advisories/CVE-2023-44385/https://agentprime.io/advisories/CVE-2023-44385/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Oct 2023 22:02:52 GMTCVECVE-2023-27482: Improper authentication in home-assistant core and othershttps://agentprime.io/advisories/CVE-2023-27482/https://agentprime.io/advisories/CVE-2023-27482/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.72 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Mar 2023 00:00:00 GMTCVEcritical