Aqara

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Aqara records in CISA KEV

No Aqara vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Camera Hub G3 Firmware 8 records HIGH Hub M2 Firmware 7 records HIGH Hub M3 Firmware 7 records HIGH Iam/sso Gateway 4 records HIGH Board Service 1 record HIGH Cloud Developer Portal 1 record HIGH Cloud Oauth Authorization Endpoint 1 record HIGH Cloud Production Api 1 record HIGH

Records

1 record in Cloud Developer Portal · all components

TI-2026-36875 CVE-2026-50082 · GHSA-9rpw-8vg4-q84p

Aqara Developer Portal insecure authentication token

HIGH 68

The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2026-06-12 Fixed in 0 CWE-306

Open these records in search →