ZDI 2026-03-06

ZDI-26-156: (Pwn2Own) Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability

CVE-2026-3558

Machine-generated analysis · WAYSCloud LLM

This vulnerability allows network-adjacent attackers to bypass authentication on Philips Hue Bridge installations without requiring credentials.

Context

The vulnerability affects Philips Hue Bridge devices implementing the HomeKit Accessory Protocol. The source describes an authentication bypass vulnerability in the transient pairing mode. The vulnerability is assigned CVE-2026-3558 with a CVSS rating of 8.1.

Operator considerations

Check: Inventory Philips Hue Bridge devices on network segments
Isolate: Segment Philips Hue Bridge devices from untrusted networks due to network-adjacent attack vector

From Zero Day Initiative ↗

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-3558.

Read the full advisory on ZDI →

Related advisories