Read the docs

Aqara

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Aqara records in CISA KEV

No Aqara vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Camera Hub G3 Firmware 8 records HIGH Hub M2 Firmware 7 records HIGH Hub M3 Firmware 7 records HIGH Iam/sso Gateway 4 records HIGH Board Service 1 record HIGH Cloud Developer Portal 1 record HIGH Cloud Oauth Authorization Endpoint 1 record HIGH Cloud Production Api 1 record HIGH

Records

1 record in Board Service · all components

TI-2026-36878 CVE-2026-50085 · GHSA-xrr5-fhq2-5w4h

Aqara Board IoT insecure debug API

Priority HIGH 81

The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00412 Published 2026-06-12 Fixed in 0 CWE-306
Open these records in search →