CVE-2026-66061Proof of concept (PoC) published · CISA
Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmation, enabling silent automation execution
CVSS score
7.1
EPSS probability
%0.2
Risk score
0.0
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
9.0
CVE-2026-64825Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload
Patch verifiedEPSS %1
9.3
CVE-2026-91130Home Assistant: XSS in Statistics Graph Card
Patch verifiedEPSS %0
5.4
CVE-2026-91129Home Assistant: mDNS Server-Side Request Forgery
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-66061"