CVE-2022-32508: Nuki Bridge v1

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb, it is possible to force a reboot of the device. This affects Nuki Bridge v1 before 1.22.0 and v2 before 2.13.2.

Affected products

• Nuki Bridge v1: before 1.22.0 (fixed in 1.22.0)
• Nuki Bridge v2: before 2.13.2 (fixed in 2.13.2)

Published 2024-05-14. Last modified 2026-06-17.