Ikea

3 CVEs in 8 Ikea products, including Dirigera, Dirigera Firmware, Tradfri Gateway E1526. Newest: CVE-2026-3588 (2026-03-09).

Ikea products with known CVEs

ProductCVEs
Dirigera1
Dirigera Firmware1
Tradfri Gateway E15261
Tradfri Gateway E1526 Firmware1
Trådfri Gateway System1
Tradfri Led1732g111
Tradfri Led1732g11 Firmware1
Trådfri Smart Lighting System1
Ikea CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3588High7.52026-03-09A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.
CVE-2022-39065Medium6.52022-10-14A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Sm…
CVE-2022-39064High8.12022-10-14An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple time…