CyberSecBulletin

Hubitat vulnerabilities

We track 1 vulnerability in Hubitat products across 6 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.

1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score

Latest Hubitat vulnerabilities

  • 9.4 Critical severity

    Elevation C3: Authorization Bypass Through User-Controlled Key

    CVE-2026-1201Hubitat

    An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side