CVE-2026-33045 in core
Сводка (Английский)
Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2025.02 and prior to version 2026.01 the "remaining charge time"-sensor for mobile phones (imported/included from Android Auto it appears) is vulnerable cross-site scripting, similar to CVE-2025-62172. Version 2026.01 fixes the issue.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Ответственный
GitHub_M
Резервировать
17.03.2026
Раскрытие
27.03.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354057 | home-assistant core межсайтовый скриптинг | 79 | Не определено | Официальное исправление | CVE-2026-33045 |