CVE-2025-10910 — A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device — CVE Database · The Intelligence Room