https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T18:45:57.995410+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82933 fkie_cve-2026-82933 2026-09-28T18:45:57.998453+00:00

mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP. Passwords, authentication tokens, and device commands are transmitted in cleartext. An attacker on the same network can intercept this traffic, steal credentials and tokens, and hijack sessions.

This issue was fixed in version 3.0.30

 https://vulnerability.circl.lu/vuln/ghsa-vrv2-qxr4-vjpx GHSA-vrv2-qxr4-vjpx 2026-09-28T18:45:57.998567+00:00

mH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP. Passwords, authentication tokens, and device commands are transmitted in cleartext. An attacker on the same network can intercept this traffic, steal credentials and tokens, and hijack sessions.

This issue was fixed in version 3.0.30