Home Assistant

Limitations

• Upstream cloud API churn breaks vendor integrations: Devices relying on unofficial manufacturer cloud APIs (including Tuya, Xiaomi Miio, and Tado) suffer recurring authentication failures whenever vendors alter endpoints.
• Monthly release cadence requires disciplined update testing: Rapid monthly core updates introduce breaking configuration changes, forcing operators to verify backups rather than enabling unattended auto-updates.
• High write volume accelerates flash memory degradation: Continuous SQLite event recording generates steady disk writes that degrade micro-SD cards on single-board computers unless moved to NVMe or external storage.
• Phased-out installation methods: The project discontinued official support for Supervised setups on generic Linux and bare virtual environments, directing users toward HAOS or container deployments.

Who should use it

• Homelab administrators needing vendor-neutral home automation: It bridges disparate Zigbee, Z-Wave, and Wi-Fi gear into a single local control plane that functions during internet outages.
• Virtualization operators managing home infrastructure: Running HAOS inside Proxmox or another hypervisor provides instant snapshot rollbacks and reliable USB device passthrough for radio coordinators.
• Self-hosters who prioritize data isolation: It guarantees domestic sensor readings, camera streams, and presence tracking remain strictly within the physical local network.

FAQ

Is Home Assistant free for commercial use? Yes. It is open-source software with no licensing fees, seat restrictions, or paywalled local features; users can optionally subscribe to Nabu Casa for remote access.

Home Assistant vs Apple Home — which should I choose? Apple Home suits households seeking a zero-maintenance setup tied to Apple devices, whereas Home Assistant fits users requiring cross-vendor protocol support, complex logic, and full control over their local infrastructure.

Can Home Assistant run in a Docker container? Yes. The Home Assistant Container image runs on standard Linux Docker hosts, though it omits the Supervisor and one-click add-on management found in HAOS.

Verdict

Home Assistant is the standard recommendation for homelab operators who demand complete ownership over their automation mesh and are willing to manage host backups and software updates; it is not intended for users who expect a zero-configuration appliance without operational maintenance. Active development from a large contributor community and an Apache-2.0 license give self-hosters long-term stability without fear of discontinued cloud servers or sudden subscription fees.

Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 159 s: ghcr.io/home-assistant/home-assistant:2026.10.4.

Based on the upstream setup. Official compose from Linux container docs. Image pinned to 2026.10.4; config stored in a named volume and port 8123 published. ADMIN_PASSWORD is not read by Home Assistant and is only used by smoke checks to complete onboarding immediately. Running without host networking disables automatic mDNS/UPnP discovery, HomeKit, and Google Cast. Privileged mode and the /run/dbus mount were dropped, so Bluetooth and USB radios (Zigbee/Z-Wave) don't work and DHCP discovery is lost.

homeassistant-1  | 2026-11-01T01:24:35.952813544Z 2026-11-01 01:24:35.950 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:35.952844336Z 2026-11-01 01:24:35.951 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /cgi-bin/wapopen?B1=OK&NO=CAM_16&REFRESH_TIME=Auto_00&FILECAMERA=../../etc/passwd%00&REFRESH_HTML=auto.htm&ONLOAD_HTML=onload.htm&STREAMING_HTML=streaming.htm&NAME=admin&PWD=admin&PIC_SIZE=0
homeassistant-1  | 2026-11-01T01:24:35.952878753Z 2026-11-01 01:24:35.951 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /cgi-bin/wapopen?B1=OK&NO=CAM_16&REFRESH_TIME=Auto_00&FILECAMERA=../../etc/passwd%00&REFRESH_HTML=auto.htm&ONLOAD_HTML=onload.htm&STREAMING_HTML=streaming.htm&NAME=admin&PWD=admin&PIC_SIZE=0
homeassistant-1  | 2026-11-01T01:24:35.952905003Z 2026-11-01 01:24:35.951 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_album&Itemid=128&target=../../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:35.952935919Z 2026-11-01 01:24:35.951 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /.../.../.../.../.../.../.../.../.../windows/win.ini
homeassistant-1  | 2026-11-01T01:24:35.952964044Z 2026-11-01 01:24:35.951 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions
homeassistant-1  | 2026-11-01T01:24:35.953147836Z 2026-11-01 01:24:35.953 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:35.953395586Z 2026-11-01 01:24:35.953 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions
homeassistant-1  | 2026-11-01T01:24:36.925567295Z 2026-11-01 01:24:36.924 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+extractvalue(0x0a,concat(0x0a,(md5(999999999)))))),NULL,NULL,NULL--%20-)and((1=&searchOper=ni&searchString=testx&filters2={}&from_course_session=0
homeassistant-1  | 2026-11-01T01:24:36.926361211Z 2026-11-01 01:24:36.924 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_imagebrowser&folder=../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:36.932132836Z 2026-11-01 01:24:36.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:36.932225086Z 2026-11-01 01:24:36.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_imagebrowser&folder=../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:36.932850211Z 2026-11-01 01:24:36.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:36.932901961Z 2026-11-01 01:24:36.928 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /mdocs-posts/?mdocs-img-preview=../../../wp-config.php
homeassistant-1  | 2026-11-01T01:24:36.934225836Z 2026-11-01 01:24:36.929 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /osclass/oc-admin/index.php?page=appearance&action=render&file=../../../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:36.934599295Z 2026-11-01 01:24:36.929 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /glpi/scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1
homeassistant-1  | 2026-11-01T01:24:36.934739461Z 2026-11-01 01:24:36.929 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /mdocs-posts/?mdocs-img-preview=../../../wp-config.php
homeassistant-1  | 2026-11-01T01:24:36.934845336Z 2026-11-01 01:24:36.933 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /osclass/oc-admin/index.php?page=appearance&action=render&file=../../../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:36.934953378Z 2026-11-01 01:24:36.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /glpi/scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1
homeassistant-1  | 2026-11-01T01:24:36.935631378Z 2026-11-01 01:24:36.935 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+extractvalue(0x0a,concat(0x0a,(md5(999999999)))))),NULL,NULL,NULL--%20-)and((1=&searchOper=ni&searchString=testx&filters2={}&from_course_session=0
homeassistant-1  | 2026-11-01T01:24:36.939352295Z 2026-11-01 01:24:36.939 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+md5(999999999))),NULL,NULL,NULL--%20-)and((1=&searchOper=ni&searchString=testx&filters2={}&from_course_session=0
homeassistant-1  | 2026-11-01T01:24:36.944635420Z 2026-11-01 01:24:36.940 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /wp-content/plugins/wpify-woo/deps/dragonbe/vies/examples/async_processing/queue.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E
homeassistant-1  | 2026-11-01T01:24:36.944642878Z 2026-11-01 01:24:36.941 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /?mdocs-img-preview=../../../wp-config.php
homeassistant-1  | 2026-11-01T01:24:36.944644211Z 2026-11-01 01:24:36.941 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1
homeassistant-1  | 2026-11-01T01:24:36.944647586Z 2026-11-01 01:24:36.941 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /?mdocs-img-preview=../../../wp-config.php
homeassistant-1  | 2026-11-01T01:24:36.944648378Z 2026-11-01 01:24:36.941 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1
homeassistant-1  | 2026-11-01T01:24:36.944705586Z 2026-11-01 01:24:36.941 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+md5(999999999))),NULL,NULL,NULL--%20-)and((1=&searchOper=ni&searchString=testx&filters2={}&from_course_session=0
homeassistant-1  | 2026-11-01T01:24:36.945186336Z 2026-11-01 01:24:36.942 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /wp-content/plugins/wpify-woo/deps/dragonbe/vies/examples/async_processing/queue.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E
homeassistant-1  | 2026-11-01T01:24:36.945404836Z 2026-11-01 01:24:36.942 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_fields&view=fields&layout=modal&list[fullordering]=updatexml(0x23,concat(1,md5(999999999)),1)
homeassistant-1  | 2026-11-01T01:24:36.945406795Z 2026-11-01 01:24:36.942 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_fields&view=fields&layout=modal&list[fullordering]=updatexml(0x23,concat(1,md5(999999999)),1)
homeassistant-1  | 2026-11-01T01:24:36.945407711Z 2026-11-01 01:24:36.942 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /enginemanager/server/logs/download?logType=error&logName=../../../../../../../../etc/passwd&logSource=engine
homeassistant-1  | 2026-11-01T01:24:36.945408503Z 2026-11-01 01:24:36.942 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /enginemanager/server/logs/download?logType=error&logName=../../../../../../../../etc/passwd&logSource=engine
homeassistant-1  | 2026-11-01T01:24:36.945409211Z 2026-11-01 01:24:36.943 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+extractvalue(0x0a,concat(0x0a,(md5(999999999)))))),NULL,NULL,NULL--%20-)and((1=&searchOper=ni&searchString=testx&filters2={}&from_course_session=0
homeassistant-1  | 2026-11-01T01:24:36.945410295Z 2026-11-01 01:24:36.943 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_onlineexam&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:36.945411170Z 2026-11-01 01:24:36.943 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_onlineexam&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:36.945411920Z 2026-11-01 01:24:36.943 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /main/inc/ajax/model.ajax.php?a=get_sessions_tracking&work_id=1&rows=0&page=1&sidx=0&sord=test&_search=1&searchField=1))and(1)%20UNION%20ALL%20SELECT%20CONCAT((select+extractvalue(0x0a,concat(0x0a,(md5(999999999)))))),NULL,NULL,NULL--%20-)and((1=&searchOper=ni&searchString=testx&filters2={}&from_course_session=0
homeassistant-1  | 2026-11-01T01:24:36.946887420Z 2026-11-01 01:24:36.946 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /error.php?SERVER_NAME=<script>alert(document.domain)</script>
homeassistant-1  | 2026-11-01T01:24:36.947297211Z 2026-11-01 01:24:36.947 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /resources//../WEB-INF/web.xml
homeassistant-1  | 2026-11-01T01:24:37.922099670Z 2026-11-01 01:24:37.919 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
homeassistant-1  | 2026-11-01T01:24:37.923523712Z 2026-11-01 01:24:37.921 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
homeassistant-1  | 2026-11-01T01:24:37.925482545Z 2026-11-01 01:24:37.924 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /duomiphp/ajax.php?action=addfav&id=1&uid=1%20and%20extractvalue(1,concat_ws(1,1,md5(999999999)))
homeassistant-1  | 2026-11-01T01:24:37.927087629Z 2026-11-01 01:24:37.926 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini
homeassistant-1  | 2026-11-01T01:24:37.928362545Z 2026-11-01 01:24:37.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_ultimateportfolio&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:37.931010545Z 2026-11-01 01:24:37.929 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini
homeassistant-1  | 2026-11-01T01:24:37.931289004Z 2026-11-01 01:24:37.929 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /plugins/content/jw_allvideos/includes/download.php?file=../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.931654962Z 2026-11-01 01:24:37.930 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?_csrf_token_645a83a41868941e4692aa31e7235f2=6a50886006f02202a6dac5cfa07bcbfb1e2a6e84&destination=zbuip%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ejgoihbmmygljgoihbmmygl&logMeIn=Login&memberID=admin&memberPassWord=password&p=member
homeassistant-1  | 2026-11-01T01:24:37.932211129Z 2026-11-01 01:24:37.930 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /vpn/../vpns/cfg/smb.conf
homeassistant-1  | 2026-11-01T01:24:37.932318670Z 2026-11-01 01:24:37.931 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_ultimateportfolio&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:37.933848295Z 2026-11-01 01:24:37.933 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('999999999'),0x7e),1)/**/or/**/1
homeassistant-1  | 2026-11-01T01:24:37.934755087Z 2026-11-01 01:24:37.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('999999999'),0x7e),1)/**/or/**/1
homeassistant-1  | 2026-11-01T01:24:37.948441004Z 2026-11-01 01:24:37.947 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../
homeassistant-1  | 2026-11-01T01:24:37.950788045Z 2026-11-01 01:24:37.947 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../
homeassistant-1  | 2026-11-01T01:24:37.950828837Z 2026-11-01 01:24:37.947 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?content=../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.950864629Z 2026-11-01 01:24:37.947 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /error.php?SERVER_NAME=<script>alert(document.domain)</script>
homeassistant-1  | 2026-11-01T01:24:37.950898212Z 2026-11-01 01:24:37.947 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /resources//../WEB-INF/web.xml
homeassistant-1  | 2026-11-01T01:24:37.950929045Z 2026-11-01 01:24:37.948 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /plugins/content/jw_allvideos/includes/download.php?file=../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.950960879Z 2026-11-01 01:24:37.948 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /duomiphp/ajax.php?action=addfav&id=1&uid=1%20and%20extractvalue(1,concat_ws(1,1,md5(999999999)))
homeassistant-1  | 2026-11-01T01:24:37.950994795Z 2026-11-01 01:24:37.948 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /vpn/../vpns/cfg/smb.conf
homeassistant-1  | 2026-11-01T01:24:37.951024754Z 2026-11-01 01:24:37.948 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?_csrf_token_645a83a41868941e4692aa31e7235f2=6a50886006f02202a6dac5cfa07bcbfb1e2a6e84&destination=zbuip%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ejgoihbmmygljgoihbmmygl&logMeIn=Login&memberID=admin&memberPassWord=password&p=member
homeassistant-1  | 2026-11-01T01:24:37.951073920Z 2026-11-01 01:24:37.948 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:37.951091004Z 2026-11-01 01:24:37.948 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:37.951120837Z 2026-11-01 01:24:37.949 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /fw.progrss.details.php?popup=..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
homeassistant-1  | 2026-11-01T01:24:37.951268337Z 2026-11-01 01:24:37.949 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /fw.progrss.details.php?popup=..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
homeassistant-1  | 2026-11-01T01:24:37.951269504Z 2026-11-01 01:24:37.949 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?content=../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.951270295Z 2026-11-01 01:24:37.949 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /creaprezzi.php?prezzoperiodo4=%22><script>javascript:alert(%27XSS%27)</script>
homeassistant-1  | 2026-11-01T01:24:37.951271087Z 2026-11-01 01:24:37.949 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /creaprezzi.php?prezzoperiodo4=%22><script>javascript:alert(%27XSS%27)</script>
homeassistant-1  | 2026-11-01T01:24:37.951271962Z 2026-11-01 01:24:37.949 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /badging/badge_template_print.php?tpl=aa.xml&idt=1337%20UNION%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,%273LU69xYj8FnfXqMU86t1ASpgA9k%27||%27CVE%27||(7*7*7*7)||SWVersion,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL%20from%20version
homeassistant-1  | 2026-11-01T01:24:37.951272920Z 2026-11-01 01:24:37.950 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /hss/?q=%27%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E
homeassistant-1  | 2026-11-01T01:24:37.951273670Z 2026-11-01 01:24:37.950 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /hss/?q=%27%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E
homeassistant-1  | 2026-11-01T01:24:37.956034295Z 2026-11-01 01:24:37.953 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /badging/badge_template_print.php?tpl=aa.xml&idt=1337%20UNION%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,%273LU69xYj8FnfXqMU86t1ASpgA9k%27||%27CVE%27||(7*7*7*7)||SWVersion,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL%20from%20version
homeassistant-1  | 2026-11-01T01:24:37.956152379Z 2026-11-01 01:24:37.953 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?controller=pjFrontEnd&action=pjActionGetLocations&locale=1&locale&hide=0&index=4005&index=0&pickup_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt&end_dt&session_id
homeassistant-1  | 2026-11-01T01:24:37.956662545Z 2026-11-01 01:24:37.953 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /%3Cscript%3Ealert(document.domain)%3C/script%3E
homeassistant-1  | 2026-11-01T01:24:37.956755795Z 2026-11-01 01:24:37.953 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /downFile.php?filename=../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.956889545Z 2026-11-01 01:24:37.954 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /downFile.php?filename=../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.956967212Z 2026-11-01 01:24:37.954 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
homeassistant-1  | 2026-11-01T01:24:37.956968795Z 2026-11-01 01:24:37.954 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /modifica_cliente.php?tipo_tabella=%22><script>javascript:alert(%27XSS%27)</script>&idclienti=1
homeassistant-1  | 2026-11-01T01:24:37.956970087Z 2026-11-01 01:24:37.955 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd
homeassistant-1  | 2026-11-01T01:24:37.957002504Z 2026-11-01 01:24:37.955 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd
homeassistant-1  | 2026-11-01T01:24:37.957036462Z 2026-11-01 01:24:37.956 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?controller=pjFrontEnd&action=pjActionGetLocations&locale=1&locale&hide=0&index=4005&index=0&pickup_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt&end_dt&session_id
homeassistant-1  | 2026-11-01T01:24:37.957065670Z 2026-11-01 01:24:37.956 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E
homeassistant-1  | 2026-11-01T01:24:37.957307920Z 2026-11-01 01:24:37.957 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /ajax.php?f=getPipelineJobOrder&joborderID=50&page=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0
homeassistant-1  | 2026-11-01T01:24:37.957678004Z 2026-11-01 01:24:37.957 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /%3Cscript%3Ealert(document.domain)%3C/script%3E
homeassistant-1  | 2026-11-01T01:24:37.957912879Z 2026-11-01 01:24:37.957 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /dati/availability_tpl.php?num_app_tipo_richiesti1=%22><script>javascript:alert(%27XSS%27)</script>
homeassistant-1  | 2026-11-01T01:24:37.958194920Z 2026-11-01 01:24:37.957 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /ajax.php?f=getPipelineJobOrder&joborderID=50&page=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0
homeassistant-1  | 2026-11-01T01:24:37.958318004Z 2026-11-01 01:24:37.958 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.958754045Z 2026-11-01 01:24:37.958 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd
homeassistant-1  | 2026-11-01T01:24:37.958799587Z 2026-11-01 01:24:37.958 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_calendar&id=XX"><script>alert(document.cookie)</script>
homeassistant-1  | 2026-11-01T01:24:37.958878379Z 2026-11-01 01:24:37.958 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /modifica_cliente.php?tipo_tabella=%22><script>javascript:alert(%27XSS%27)</script>&idclienti=1
homeassistant-1  | 2026-11-01T01:24:37.958879920Z 2026-11-01 01:24:37.958 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_calendar&id=XX"><script>alert(document.cookie)</script>
homeassistant-1  | 2026-11-01T01:24:38.920252254Z 2026-11-01 01:24:38.919 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_dismisshint&callback=<script>alert(document.cookie)</script>
homeassistant-1  | 2026-11-01T01:24:38.923183337Z 2026-11-01 01:24:38.921 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.923724671Z 2026-11-01 01:24:38.923 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.925760379Z 2026-11-01 01:24:38.925 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/var/www/html/index.html
homeassistant-1  | 2026-11-01T01:24:38.929555837Z 2026-11-01 01:24:38.926 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/var/www/html/index.html
homeassistant-1  | 2026-11-01T01:24:38.929569379Z 2026-11-01 01:24:38.926 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:38.929572171Z 2026-11-01 01:24:38.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00
homeassistant-1  | 2026-11-01T01:24:38.935218004Z 2026-11-01 01:24:38.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_dismisshint&callback=<script>alert(document.cookie)</script>
homeassistant-1  | 2026-11-01T01:24:38.935391254Z 2026-11-01 01:24:38.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /dati/availability_tpl.php?num_app_tipo_richiesti1=%22><script>javascript:alert(%27XSS%27)</script>
homeassistant-1  | 2026-11-01T01:24:38.935469171Z 2026-11-01 01:24:38.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains
homeassistant-1  | 2026-11-01T01:24:38.935534587Z 2026-11-01 01:24:38.927 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1
homeassistant-1  | 2026-11-01T01:24:38.935592421Z 2026-11-01 01:24:38.928 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1
homeassistant-1  | 2026-11-01T01:24:38.935659671Z 2026-11-01 01:24:38.928 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains
homeassistant-1  | 2026-11-01T01:24:38.935698254Z 2026-11-01 01:24:38.930 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_displayday&callback=1&bymethod&by_id=/../../../../../../r%26_=--><script>alert(document.cookie)</script>
homeassistant-1  | 2026-11-01T01:24:38.935759046Z 2026-11-01 01:24:38.930 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /perpustakaan/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.936393379Z 2026-11-01 01:24:38.930 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /perpustakaan/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.936513671Z 2026-11-01 01:24:38.931 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a request with a potential harmful query string: /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_displayday&callback=1&bymethod&by_id=/../../../../../../r%26_=--><script>alert(document.cookie)</script>
homeassistant-1  | 2026-11-01T01:24:38.936601087Z 2026-11-01 01:24:38.932 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /slims/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.936707254Z 2026-11-01 01:24:38.932 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /slims/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.936798754Z 2026-11-01 01:24:38.933 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /perpustakaan/slims/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.936892129Z 2026-11-01 01:24:38.933 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /perpustakaan/slims/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.936977796Z 2026-11-01 01:24:38.933 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /e-library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.937090879Z 2026-11-01 01:24:38.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /e-library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.937156504Z 2026-11-01 01:24:38.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /perpus/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.937507379Z 2026-11-01 01:24:38.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /perpus/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.937714796Z 2026-11-01 01:24:38.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /digilib/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.938471921Z 2026-11-01 01:24:38.934 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /digilib/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.938489462Z 2026-11-01 01:24:38.935 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /bulian/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.938490796Z 2026-11-01 01:24:38.936 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /bulian/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.938537754Z 2026-11-01 01:24:38.937 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php
homeassistant-1  | 2026-11-01T01:24:38.938552087Z 2026-11-01 01:24:38.937 WARNING (MainThread) [homeassistant.components.http.security_filter] Filtered a potential harmful request to: /library/index.php/%22--%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/index.php