Signify vulnerabilities

Products

• Philips Hue Bridge Pro 1
• wiz connected 1

Latest Signify CVEs

Newest publication first

1. CVE-2026-73669 Signify Philips Hue Bridge Pro MQTT broker missing authentication

   Published 2026-08-13

   Medium·CVSS 6.9 EPSS 0.52%

   The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights....

2. CVE-2025-56562 An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only requiring the MAC address.

   Published 2025-09-16

   High·CVSS 7.5 EPSS 0.33%

   An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only requiring the MAC address.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.