Esphome Device-builder vulnerabilities

• esphome device-builder ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade CVE-2026-59178 Fix available 9.8 CriticalSeptember 14, 2026
• esphome device-builder ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces CVE-2026-59177 Fix available 8.8 HighSeptember 9, 2026