Skip to content
OpenAdvisories
Medium VA-26-084-01 1 CVE

Nanoleaf Lines unauthenticated firmware file store

Published Mar 25, 2026 · Updated Apr 2, 2026 · Revision 2

Vendor: Nanoleaf Product: Lines

Summary

Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads. A remote, unauthenticated attacker can upload firmware files on the device and consume storage resources.

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-33268

    Nanoleaf Lines unauthenticated firmware file store

    Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads. A remote, unauthenticated attacker can upload firmware files on the device and consume storage resources. Fixed in 12.3.6.

    Nanoleaf Lines

Revision history

  1. #1.1.0

    Added vendor advisory

  2. #1.0.0

    Initial publication