Zigbee2MQTT Green Power Won’t Pair: Coordinator Explained
Green Power switch won't pair in Zigbee2MQTT? Your coordinator decides it: Z-Stack sticks pair GP directly, EmberZNet ones need a proxy router nearby.
~/archive $ ls -la
Archive
Security
-
-
Zigbee2MQTT Network Key: Re-pairing and Group/Scene Recovery
Plan a Zigbee2MQTT network-key change with backups, re-pairing and group/scene checks. Understand adapter-specific startup behavior and recovery steps.
-
Zigbee2MQTT Install Codes: Why Some Devices Need Them
Register a Zigbee2MQTT install code: identify the correct device label, supported adapter and QR format, then verify registration before pairing.
-
Sonoff DIY Mode: Local Control Without eWeLink Cloud
Sonoff's DIY Mode swaps eWeLink cloud control for a local HTTP API, no reflash needed. Which devices support it, and how to bring it into Home Assistant.
-
Zigbee2MQTT permit_join: The Security Risk After 2.0
Zigbee2MQTT 2.0 removed permanent permit_join. What the 254-second join window still exposes, and how a device passlist controls membership locally.
-
Zigbee2MQTT MQTT Broker Security: A Practical Checklist
Secure Zigbee2MQTT and Mosquitto with current authentication, topic permissions, TLS, frontend protection and careful network configuration.
-
Xiaomi Cloud Tokens Extractor Stuck on 2FA? Here’s the Fix
Xiaomi Cloud Tokens Extractor stuck in a 2FA login loop? Here's the update that clears it, the official checklist, and the DevTools workaround.
-
Aqara Cloud CVE Chain (June 2026): What It Means for Local-First Users
Aqara's June 2026 cloud CVEs chain into an account-takeover path. Here's how the chain works, who's exposed, and why local Z2M/ZHA setups sit outside it.
-
Aqara Cloud OAuth Flaw (CVE-2026-50090): What It Is and Whether You Are Affected
CVE-2026-50090 is a CVSS 9.3 OAuth redirect bypass in Aqara's cloud. If you run Zigbee2MQTT, ZHA, or local HomeKit, you are not in scope. Here is why.
-
Aqara Hub Security Patch Status: Are the 2025 CVEs Fixed?
Three CVEs hit the Aqara Hub M2, M3, and Camera Hub G3 in December 2025. Here's what's actually patched, what's still unclear, and what to do.