Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-82932

Missing Firewall Configuration in mH-DEVELOPER

Description

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in version 3.0.30

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F&F Filipowski mH-DEVELOPER

Default version status: unaffected

  • 0 to < 3.0.30affected

References