Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Homeassistant-ai
Ha-mcp
Homeassistant-ai Ha-mcp vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
homeassistant-ai
ha-mcp
,
home assistant mcp server
+1 more
ha-mcp has XSS via Unescaped HTML in OAuth Consent Form
CVE-2026-32112
Fix available
6.8
Medium
March 11, 2026
homeassistant-ai
ha-mcp
,
home assistant mcp server
+1 more
ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
CVE-2026-32111
Fix available
5.3
Medium
March 11, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open