Sploitus

7 exploited vulnerabilities in Home Assistant Core

Vulnerabilities with publicly known exploits

Vendors
Home Assistant, Unknown, Aiohttp
With known exploits
7
Affected Home-assistant versions
< 2023.3.0, 2023.8.0, 2025.8.0
Affected Home-assistant Supervisor versions
< 2023.03.1
Affected Home-assistant Home-assistant-js-websocket versions
< 8.2.0

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2023-27482
CVSS 10.0 CRITICAL 2023-03-08FIX AVAILABLE
CVE-2026-64825
CVSS 9.3 CRITICAL 2026-07-21FIX AVAILABLE
CVE-2026-64824 1 exploit
CVSS 9.3 CRITICAL 2026-05-29FIX AVAILABLE
CVE-2023-41896
CVSS 9.0 CRITICAL 2023-10-19FIX AVAILABLE
CVE-2025-25305
CVSS 7.0 HIGH 2025-02-18FIX AVAILABLE
CVE-2025-65713
CVSS 4.0 MEDIUM 2025-12-23FIX AVAILABLE
CVE-2026-64823
CVSS 4.7 MEDIUM 2026-07-21FIX AVAILABLE