Ikea
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| dirigera | 1 | – | Mar 9, 2026 |
| TRÅDFRI gateway system | 1 | – | Oct 14, 2022 |
| TRÅDFRI smart lighting system | 1 | – | Oct 14, 2022 |
Exploited and recent CVEs
- CVE-2026-3588 Server-Side Request Forgery (SSRF) in ikea dirigera 0.1%
- CVE-2022-39065 A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI remote control. The m 0.4%
- CVE-2022-39064 An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset. Thi 0.4%