XSS in Home-assistant Core

CVE-2026-33044

Home Assistant is open source home automation software that puts local control and privacy first. Starting in version 2020.02 and prior to version 2026.01, an authenticated party can add a malicious name to their device entity, allowing fo…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (6.2th percentile) — read the EPSS interpretation.