A write up of the 9.4 vuln in #hubitat (CVE-2026-1201) is available on the ostrich lab site. https://ostrichlab.io/research-blog/?post=hubitat_writeup
If you have a hubitat please update. If you like this kind of research please follow!
A write up of the 9.4 vuln in #hubitat (CVE-2026-1201) is available on the ostrich lab site. https://ostrichlab.io/research-blog/?post=hubitat_writeup
If you have a hubitat please update. If you like this kind of research please follow!
More to come in the next few weeks, but I do want to share the CISA Advisory for the #hubitat home automation hub vulnerability that I found. Big shout out to hubitat for resolving this so quickly!
https://www.cisa.gov/news-events/ics-advisories/icsa-26-022-06
Alright, got #HomeAssistant set up on my #RPi3 and got it connected through my browser and iOS app. Added a few devices but have to find a way yet to connect my #Carrier #Infinity thermostat, #Flair smart vents, #Leviton no-neutral switch wifi hub, #Nest thermostat, #Orbit #Bhyve sprinkler controller, #Hubitat, and #Roku.
You know, just a few things π
Also got Ring connected but the cams don't work. They weren't working in #Homebridge/#Homekit anyway, so whatevs.
TIL that some of the pre-set lighting scenes in the Hue app use colors outside of RGB/HSV, in the CIE XYZ color space. This is a little problematic, trying to get those colors outside of the Hue app, which I want to move away from. Specifically: "nightlight" can't be coded without XYZ, and #Hubitat doesn't offer that capability. Maybe another reason to push forward with #HomeAssistant to manage things. RGB(3,1,0) is best I can do.
Also, the Tapo #Matter bulbs don't seem to respect brightness...
I know I *should* do it, as so much has changed with the move, but recreating dashboards and automations is a little daunting, and definitely time consuming. Though it would allow me to coalesce Alexa, Hue, and Hubitat Elevation into, as best I can, single source of truth (namely HE until I can both going to HA)
@Benhm3 Yeah, it's not at all reliable, and it doesn't matter which ZWave controller you use.
I've tried #Hubitat, #Homey and #Smartthings and none of them have the same problem.
If you're not interested in the Apple Homekit side of things, then without doubt #Smartthings is the best of the bunch. If you want Homekit support, next is #Homey, if your devices are supported (which is less likely), and finally #Hubitat which is fine but pretty clunky for automation.
Homey Pro's automation system is decent on the app, but if you use the web interface they have a #NodeRED style system, which is excellent.
#homeautomation #smarthome #hubitat #cybersecurity #Privacy
Security advisory for a new vuln on Hubitat. If you have one or know people in the home automation space its worth updating. Full write up to come soon.
Just dropped an advisory on a vulnerability I discovered in #Hubitat. A patch is already out, so if youβre running Hubitat in your smart home, make sure you update.
Formal advisory: https://ostrichlab.io/research-blog/?post=hubitat_FA