Read the docs

F&F Filipowski

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

F&F Filipowski records in CISA KEV

No F&F Filipowski vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-57217 CVE-2026-82935 · GHSA-p2fw-wccq-9qh3

Use of End-of-Life components in mH-DEVELOPER

Priority LOW 37

mH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00368 Published 2026-09-28 Fixed in 3.0.30 CWE-1104
TI-2026-57212 CVE-2026-82928 · GHSA-27f6-7954-3wm7

Undocumented access path in mH-DEVELOPER

Priority LOW 35

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorized_keys, serving as a potential backdoor.

CVSS 4.0HIGH 7.7 Adjacent network No auth No interaction EPSS 0.00183 Published 2026-09-28 Fixed in 3.0.30 CWE-1242
TI-2026-57214 CVE-2026-82930 · GHSA-rr4v-3p4h-3928

Missing Authentication in mH-DEVELOPER

Priority LOW 28

mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication.

CVSS 4.0MEDIUM 6.4 Adjacent network No auth No interaction EPSS 0.00215 Published 2026-09-28 Fixed in 3.0.30 CWE-306
TI-2026-57213 CVE-2026-82929 · GHSA-mh6x-hrvc-rqhh

Use of Shared Cryptographic Key in mH-DEVELOPER

Priority LOW 28

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00238 Published 2026-09-28 Fixed in 3.0.30 CWE-321
TI-2026-57218 CVE-2026-82936 · GHSA-289h-w85v-v5r6

Denial of Service in mH-DEVELOPER

Priority LOW 26

mH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption.

CVSS 4.0MEDIUM 5.9 Adjacent network Low privileges No interaction EPSS 0.00173 Published 2026-09-28 Fixed in 3.0.30 CWE-770
TI-2026-57215 CVE-2026-82932 · GHSA-grg4-hvg7-5g57

Missing Firewall Configuration in mH-DEVELOPER

Priority LOW 23

mH-DEVELOPER smart home module does not load any firewall rules at startup.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00174 Published 2026-09-28 Fixed in 3.0.30 CWE-923
Open these records in search →