CVE-2026-3558 - Vulnerability Analysis

Overview

Philips Hue Bridge contains an authentication bypass caused by lack of authentication in HomeKit Accessory Protocol service on TCP port 8080, letting network-adjacent attackers bypass authentication, exploit requires no authentication.

Severity & Score

Impact

Network-adjacent attackers can bypass authentication, potentially gaining unauthorized access to the device.

Mitigation

Update to the latest version of Philips Hue Bridge firmware.

References

• https://www.zerodayinitiative.com/advisories/ZDI-26-156/

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 16, 2026

🟠 CVE-2026-3558 - High (8.1) Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3558/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner