H6056 vulnerabilities

1 known vulnerability in H6056 from Govee. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  H6056: Authorization Bypass Through User-Controlled Key

  CVE-2025-10910Dec 18, 2025Govee

  A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s accou