TI-2025-06563 CVE-2025-7202 · GHSA-q9hg-6rf6-h96c
Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights
Priority LOW 23
A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.