Security
Loading…

CVE-2026-82932

UNKNOWN
View on NVD← Back to search
Description

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in version 3.0.30

Timeline
Published:September 28th, 2026 1:17 PM
Last modified:September 28th, 2026 4:31 PM
CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)
CWE-923
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute