CVE-2024-48786: Switchbot Firmware

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in SWITCHBOT INC SwitchBot (com.theswitchbot.switchbot) 5.0.4 allows a remote attacker to obtain sensitive information via the firmware update process.

Affected products

• Switchbot Switchbot Firmware: version 5.0.4 only

Published 2024-10-11. Last modified 2026-07-05.