DO
Product
domoticz
by domoticz · last CVE Oct 28, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch

Add domoticz to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-75520
New
5.4–Oct 28
Domoticz: Missing authorization and path traversal in the udevices Lua parser handler
Affected: <= 2026.2
CVE-2019-15480
5.4
1%
Aug 23
Domoticz 4.10717 has XSS via item.Name
Affected: 4.10717
CVE-2026-1001
4.8
0%
Mar 25
Domoticz < 2026.1 Stored XSS via Hardware Configuration Endpoint
Affected: before 2026.1
CVE-2026-11425
4.4
0%
Aug 7
Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
Affected: before 2026.3
Showing 4