CVE-2026-33045
Cross-site scripting in Home Assistant
CVSS score
5.4
EPSS probability
%0.2
Risk score
0.0
Published
7 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/home-assistant/core/security/advisories/GHSA-46j8-vpx8-6p72
Makefile Go / Python
https://github.com/home-assistant/core/security/advisories/GHSA-mq77-rv97-285m
Makefile Go / Python
Similar Vulnerabilities
9.0
CVE-2026-64825Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload
Patch verifiedEPSS %1
9.3
CVE-2026-91130Home Assistant: XSS in Statistics Graph Card
Patch verifiedEPSS %0
7.6
CVE-2026-54317Information exposure in Home Assistant
Patch status unknown Public Exploits:1EPSS %0
5.4
CVE-2026-91129Home Assistant: mDNS Server-Side Request Forgery
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-33045"