Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Home Assistant
Home Assistant vulnerabilities
Newest
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
home assistant
companion app (android)
,
companion app (ios)
,
home-assistant
core
+2 more
Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection
CVE-2026-44698
8.3
High
May 29, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open