A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.
- https://www.toreon.com/flashing-your-lights-cve-2025-7202/
No PoCs found on GitHub currently.