Vulnerabilities

TI-2026-19197 CVE-2026-23833 · GHSA-4h3h-63v6-88qx

ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

MEDIUM 49

ESPHome is a system to control microcontrollers remotely through Home Automation systems.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00301 Published 2026-01-19 Fixed in 2025.12.7 CWE-190

TI-2024-18126 CVE-2024-27287 · GHSA-9p43-hj5j-96h5

MEDIUM 41

ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00681 Published 2024-03-06 Fixed in 2024.2.2 CWE-79

TI-2024-17944 CVE-2024-27081 · GHSA-8p25-3q46-8q2p

HIGH 73

ESPHome is a system to control your ESP8266/ESP32.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01535 Published 2024-02-26 Fixed in 2024.2.1 CWE-22