Skip to content
OpenAdvisories

Vendor

dannymcc

1 known vulnerabilities.

Products

bluehood 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-49994

    Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

    Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/* handlers (settings, devices, groups, per-device endpoints including /api/device/{mac}…

    dannymcc bluehood