https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:26:35.125937+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82932 fkie_cve-2026-82932 2026-09-28T17:26:35.130106+00:00

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service.

This issue was fixed in version 3.0.30

 https://vulnerability.circl.lu/vuln/ghsa-grg4-hvg7-5g57 GHSA-grg4-hvg7-5g57 2026-09-28T17:26:35.130246+00:00

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service.

This issue was fixed in version 3.0.30