Executive brief
Home Assistant has stored XSS in Map-card through malicious device name
Affected products
- PyPI homeassistant
Junglewise Threat Intelligence
CVE-2026-33044: PYSEC-2026-2517 - Home Assistant has stored XSS in Map-card through malicious device name
CVE-2026-33044 · Severity: medium · CVSS 4 · Published 2026-07-13
Technologies: homeassistant (PyPI). Vendors: PyPI.
Related threats
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automati
- Home Assistant Core path traversal in backup upload
- PYSEC-2026-2516 - Home Assistant has stored XSS in history-graphs
- PYSEC-2026-1454 - Home Assistant Core before is vulnerable to Directory Traversal