Vulnerabilities

TI-2026-03093 CVE-2026-3588 · GHSA-x9w3-4p72-r5rx

Server-Side Request Forgery (SSRF) in ikea dirigera

LOW 32

A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.0012 Published 2026-03-09 No fix listed CWE-918

TI-2022-18457 CVE-2022-39065 · GHSA-j9r7-xgvg-h2r5

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive…

LOW 29

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00404 Published 2022-10-14 Fixed in 1.19.26 CWE-241

TI-2022-18456 CVE-2022-39064 · GHSA-7hcw-vwc2-8cg8

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI…

LOW 37

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00403 Published 2022-10-14 No fix listed CWE-241

Vulnerabilities

Filters

Server-Side Request Forgery (SSRF) in ikea dirigera

A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive…

An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI…