Hubitat vulnerabilities

Products

• Elevation C3 1
• Elevation C4 1
• Elevation C5 1
• Elevation C7 1
• Elevation C8 1
• Elevation C8 pro 1

Latest Hubitat CVEs

Newest publication first

1. CVE-2026-1201 Authorization Bypass Through User-Controlled Key in Hubitat Elevation Hubs

   Published 2026-01-22

   Critical·CVSS 9.4 EPSS 0.47%

   An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulatio...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.