Domoticz

Products

ProductCVEsExploitedLatest
Domoticz4–Oct 28, 2026

Exploited and recent CVEs

  • CVE-2026-75520 Medium 5.4 Domoticz: Missing authorization and path traversal in the udevices Lua parser handler 0.3%
  • CVE-2026-11425 Medium 4.4 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering 0.3%
  • CVE-2026-71265 High 7.5 Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy() 0.3%
  • CVE-2026-1001 Medium 4.8 Domoticz < 2026.1 Stored XSS via Hardware Configuration Endpoint 0.2%