PT-2026-23773 · Philips · Philips Hue Bridge

Matthieu Breuil + 2 · Published 2026-03-06 · Updated 2026-05-21 · CVE-2026-3555

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips Hue Bridge (affected versions not specified)

Description A heap-based buffer overflow exists in the custom command handler of the Zigbee stack. This issue occurs due to insufficient validation of data size before it is copied into a fixed-size heap buffer during the processing of custom Zigbee ZCL (Zigbee Cluster Library) frames within the Model Info download functionality. Network-adjacent attackers can exploit this flaw to execute arbitrary code in the context of the device. Exploitation requires user interaction, specifically that the user must initiate the device pairing process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-3555

ZDI-26-153

Affected Products

Philips Hue Bridge

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-3555 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-153 · Security Note
• https://twitter.com/CVEnew/status/2032605866428444889 · Twitter Post
• https://twitter.com/ForeignElations/status/2057509045020336314 · Twitter Post
• https://twitter.com/TheZDIBugs/status/2030060466412617864 · Twitter Post
• https://t.me/cveNotify/161093 · Telegram Post
• https://twitter.com/ForeignElations/status/2057497027055956196 · Twitter Post
• https://twitter.com/TheHackerWire/status/2033634515156185501 · Twitter Post
• https://twitter.com/0xor0ne/status/2057477086982414559 · Twitter Post