CVE-2018-8846: Philips E-Alert Firmware

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is then served to other users.

Affected products

• Philips E-Alert Firmware: up to and including r2.1

Published 2018-09-26. Last modified 2026-06-17.