CVE-2026-82932

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in version 3.0.30

• CWE-923

• https://cert.pl/posts/2026/09/CVE-2026-82928/
• https://www.fif.com.pl/pl/strona-glowna/1367-mh-developer.html

Published

Sep 28, 2026

Last Modified

Sep 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82926NULL pointer dereference vulnerability in Samsung Open Sourc…5.5
• CVE-2026-82927Untrusted pointer dereference vulnerability in Samsung Open …5.5
• CVE-2026-82928mH-DEVELOPER smart home module contains a hardcoded SSH publ…7.7
• CVE-2026-82929mH-DEVELOPER smart home module uses the same hard-coded SSH …6.3
• CVE-2026-8293The Really Simple Security WordPress plugin before 9.5.10.1…7.5
• CVE-2026-82930mH-DEVELOPER smart home module does not verify tokens in its…6.4
• CVE-2026-82933mH-DEVELOPER smart home module sends its web interface and A…6
• CVE-2026-82935mH-DEVELOPER smart home module ships with an end-of-life, un…6.9
• CVE-2026-82936mH-DEVELOPER smart home module is vulnerable to Denial of Se…5.9
• CVE-2026-8295An integer overflow vulnerability in the simdjson document-b…6.9
• CVE-2026-82954A vulnerability was detected in Dokploy up to 0.29.7. This i…9.9
• CVE-2026-82955In the current development version of Eclipse aeriOS, which …9