---
title: "Philips hue bridge v2 vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/philips/hue-bridge-v2
type: product
description: "Philips hue bridge v2 has 9 published CVEs, 0 in CISA KEV and 1 with public exploits."
updated: 2026-03-13
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Philips hue bridge v2 vulnerabilities

Vendor: [Philips](https://radicalnotion.ai/vendor/philips)

- **Published CVEs:** 9
- **In CISA KEV:** 0
- **With a public exploit:** 1
- **With a patch:** 8
- **Average CVSS:** 8.3
- **First CVE:** 2020-01-23
- **Latest CVE:** 2026-03-13

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 9 |
| Medium | 0 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 6 |
| [CWE-306](https://radicalnotion.ai/cwe/cwe-306) | Missing Authentication for Critical Function | 1 |
| [CWE-323](https://radicalnotion.ai/cwe/cwe-323) | Reusing a Nonce, Key Pair in Encryption | 1 |
| [CWE-347](https://radicalnotion.ai/cwe/cwe-347) | Improper Verification of Cryptographic Signature | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2020 | 1 |
| 2021 | 0 |
| 2022 | 0 |
| 2023 | 0 |
| 2024 | 0 |
| 2025 | 0 |
| 2026 | 8 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-3562 | Philips Hue Bridge hk\_hap Ed25519 Signature Verification Authentication Bypass Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2026-3561 | Philips Hue Bridge hk\_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 8.0 | No | No | Yes |
| CVE-2026-3560 | Philips Hue Bridge HomeKit hk\_hap\_pair\_storage\_put Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2026-3559 | Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability | high | 8.1 | No | No | Yes |
| CVE-2026-3558 | Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability | high | 8.1 | No | No | Yes |
| CVE-2026-3557 | Philips Hue Bridge hap\_pair\_verify\_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 8.0 | No | No | Yes |
| CVE-2026-3556 | Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2026-3555 | Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 8.0 | No | No | Yes |
| CVE-2020-6007 | - | high | 7.9 | No | Yes | No |

## Frequently asked questions

### How many CVEs does Philips hue bridge v2 have?

Philips hue bridge v2 has 9 published CVE records since 2020.

### How many Philips hue bridge v2 CVEs are in CISA KEV?

None of Philips hue bridge v2's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Philips hue bridge v2 vulnerabilities?

Yes — 1 of Philips hue bridge v2's CVEs have a known public exploit.

### What are the most common weakness types in Philips hue bridge v2 CVEs?

Philips hue bridge v2's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-306 (Missing Authentication for Critical Function), CWE-323 (Reusing a Nonce, Key Pair in Encryption), CWE-347 (Improper Verification of Cryptographic Signature).

### What is the average severity of Philips hue bridge v2 CVEs?

The average CVSS base score across Philips hue bridge v2's scored CVEs is 8.3.

## Other products from this vendor

- [IntelliSpace Portal](https://radicalnotion.ai/vendor/philips/intellispace-portal) (14 CVEs)
- [patient information center ix](https://radicalnotion.ai/vendor/philips/patient-information-center-ix) (11 CVEs)
- [e-alert firmware](https://radicalnotion.ai/vendor/philips/e-alert-firmware) (10 CVEs)
- [e-Alert Unit (non-medical device)](https://radicalnotion.ai/vendor/philips/e-alert-unit-non-medical-device) (9 CVEs)
- [hue bridge v2 firmware](https://radicalnotion.ai/vendor/philips/hue-bridge-v2-firmware) (9 CVEs)
- [Philips IntelliSpace Portal](https://radicalnotion.ai/vendor/philips/philips-intellispace-portal) (9 CVEs)
- [Vue PACS](https://radicalnotion.ai/vendor/philips/vue-pacs) (9 CVEs)
- [Clinical Collaboration Platform](https://radicalnotion.ai/vendor/philips/clinical-collaboration-platform) (8 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/philips/hue-bridge-v2). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.