Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Aqara Component: Iam/sso Gateway Clear all filters
TI-2026-36882 CVE-2026-50089 · GHSA-x2pr-g8vf-qfcp

Aqara IAM/SSO Gateway open redirect

Priority MEDIUM 60

The Aqara IAM/SSO Gateway (gw-builder.aqara.com) provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (6.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00196 Published 2026-06-12 Fixed in 0 CWE-601
TI-2026-36880 CVE-2026-50087 · GHSA-x4g8-9rgj-rr4r

Aqara IAM/SSO Gateway cross-origin resource sharing

Priority LOW 35

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00204 Published 2026-06-12 Fixed in 0 CWE-942
TI-2026-36879 CVE-2026-50086 · GHSA-3897-2crh-vgmr

Aqara unauthenticated AES oracle

Priority HIGH 82

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0029 Published 2026-06-12 Fixed in 0 CWE-327
TI-2026-36876 CVE-2026-50083 · GHSA-h5g5-hrhr-3ph4

Aqara hardcoded OAuth client credentials

Priority HIGH 82

The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00364 Published 2026-06-12 Fixed in 0 CWE-798