Skip to content
OpenAdvisories

Vendor

esphome

10 known vulnerabilities.

Products

esphome 8 device-builder 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.7
    CVE-2026-23833

    ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

    ESPHome is a system to control microcontrollers remotely through Home Automation systems. In versions 2025.9.0 through 2025.12.6, an integer overflow in the API component's protobuf decoder allows denial-of-service attacks when API encryption is not used. The…

    esphome esphome esphome PyPI