LIVE · cybersecurity feed
Live wire
vendor

Philips

8 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical0
High8
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-35568.8highhue bridge v2 firmwarePhilips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability.219d ago
CVE-2026-35628.8highhue bridge v2 firmwarePhilips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.219d ago
CVE-2026-35608.8highhue bridge v2 firmwarePhilips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability.219d ago
CVE-2026-35588.1highhue bridge v2 firmwarePhilips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.219d ago
CVE-2026-35598.1highhue bridge v2 firmwarePhilips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability.219d ago
CVE-2026-35618highhue bridge v2 firmwarePhilips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.219d ago
CVE-2026-35578highhue bridge v2 firmwarePhilips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnera219d ago
CVE-2026-35558highhue bridge v2 firmwarePhilips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerabili219d ago

Filter the full tracker by Philips →

Our coverage of Philips

ransomware

Philips and GE investigating Clop ransomware data theft claims

General Electric (GE) and Philips are investigating claims by the Clop ransomware group that their systems were breached and data was stolen. While GE stated it is assessing the potential issue, Philips confirmed an attempted cybersecurity compromise of a specific internal enterprise server, which it has since contained. Philips clarified that this incident did not impact customer environments.