Hubitat

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Hubitat records in CISA KEV

No Hubitat vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-00928 CVE-2026-1201 · GHSA-gfwv-5762-mwrm

Authorization Bypass Through User-Controlled Key in Hubitat Elevation Hubs

MEDIUM 49

An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside o…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00473 Published 2026-01-22 Fixed in 2.4.2.157 CWE-639

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0