Skip to content
OpenAdvisories

Product · esphome

device-builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-59178

    ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

    ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier versions, and the legacy `esphome` …

    esphome device-builder esphome-device-builder PyPI