Description
Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ed25519_sign_open function. The issue results from improper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-28480.
INFO
Published Date :
2026-03-13T20:37:09.162Z
Last Modified :
2026-03-16T20:21:33.688Z
Source :
zdi
AFFECTED PRODUCTS
The following products are affected by CVE-2026-3562 vulnerability.
| Vendors | Products |
|---|---|
| Philips |
|
| Phillips |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-3562.
