← Database

CVE-2026-82932

N/A CVSS: N/A Published: 2026-09-28 Modified: 2026-09-28

Description

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in version 3.0.30

Affected Platforms

Unknown

Weakness Type

CWE-923

References