{"api_version":"1","generated_at":"2026-11-13T00:01:40+00:00","cve":"CVE-2026-118631","urls":{"html":"https://cve.report/CVE-2026-118631","api":"https://cve.report/api/cve/CVE-2026-118631.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-118631","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-118631"},"summary":{"title":"Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability","description":"Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target system, in order to exploit this vulnerability.\n\nThe specific flaw exists within the factory data service, which listens on TCP port 5001 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to modify files in the context of the service account. Was ZDI-CAN-33090.","state":"PUBLISHED","assigner":"zdi","published_at":"2026-11-12 03:17:10","updated_at":"2026-11-12 18:48:46"},"problem_types":["CWE-88","CWE-88 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"],"metrics":[{"version":"3.0","source":"zdi-disclosures@trendmicro.com","type":"Secondary","score":"3.8","severity":"LOW","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"}},{"version":"3.0","source":"CNA","type":"CVSS","score":"3.8","severity":"LOW","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","data":{"baseScore":3.8,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","version":"3.0"}}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-890/","name":"https://www.zerodayinitiative.com/advisories/ZDI-26-890/","refsource":"zdi-disclosures@trendmicro.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-118631","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118631","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Philips","product":"Hue Bridge Pro","version":"affected 2071026000","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unknown","product":"Hue Bridge Pro","vendor":"Philips","versions":[{"status":"affected","version":"2071026000"}]}],"dateAssigned":"2026-10-28T16:58:46.061Z","datePublic":"2026-11-06T22:17:21.881Z","descriptions":[{"lang":"en","value":"Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target system, in order to exploit this vulnerability.\n\nThe specific flaw exists within the factory data service, which listens on TCP port 5001 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to modify files in the context of the service account. Was ZDI-CAN-33090."}],"metrics":[{"cvssV3_0":{"baseScore":3.8,"baseSeverity":"LOW","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","version":"3.0"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-88","description":"CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-12T02:52:04.600Z","orgId":"99f1926a-a320-47d8-bbb5-42feb611262e","shortName":"zdi"},"references":[{"name":"ZDI-26-890","tags":["x_research-advisory"],"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-890/"}],"source":{"lang":"en","value":"Connor Ford @ByteInsight of TrendAI Zero Day Initiative"},"title":"Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability"}},"cveMetadata":{"assignerOrgId":"99f1926a-a320-47d8-bbb5-42feb611262e","assignerShortName":"zdi","cveId":"CVE-2026-118631","datePublished":"2026-11-12T02:52:04.600Z","dateReserved":"2026-10-28T16:58:46.034Z","dateUpdated":"2026-11-12T02:52:04.600Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-12 03:17:10","lastModifiedDate":"2026-11-12 18:48:46","problem_types":["CWE-88","CWE-88 CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","baseScore":3.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2,"impactScore":1.4}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"118631","Ordinal":"1","Title":"Philips Hue Bridge Pro Argument Injection Restricted File Write ","CVE":"CVE-2026-118631","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"118631","Ordinal":"1","NoteData":"Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target system, in order to exploit this vulnerability.\n\nThe specific flaw exists within the factory data service, which listens on TCP port 5001 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to modify files in the context of the service account. Was ZDI-CAN-33090.","Type":"Description","Title":"Philips Hue Bridge Pro Argument Injection Restricted File Write "}]}}}