CVE-2025-7202 — Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights
A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.
Published: 2025-08-06 · CVSS: 5.1 · CVSS 4.0
A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7