Ikea

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ikea records in CISA KEV

No Ikea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dirigera Firmware 1 record LOW Tradfri Gateway E1526 Firmware 1 record LOW Tradfri Led1732g11 Firmware 1 record LOW

Records

3 records

TI-2022-18456 CVE-2022-39064 · GHSA-7hcw-vwc2-8cg8

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI…

LOW 37

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00403 Published 2022-10-14 No fix listed CWE-241

TI-2026-03093 CVE-2026-3588 · GHSA-x9w3-4p72-r5rx

Server-Side Request Forgery (SSRF) in ikea dirigera

LOW 32

A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.0012 Published 2026-03-09 No fix listed CWE-918

TI-2022-18457 CVE-2022-39065 · GHSA-j9r7-xgvg-h2r5

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive…

LOW 29

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00404 Published 2022-10-14 Fixed in 1.19.26 CWE-241

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0