Aqara — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting Aqara. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerabilities for the vendor Aqara, focusing on smart home devices and associated software components. It collects security advisories related to weak ciphers, insufficient access control, and firmware flaws, covering disclosures from 2023 through 2024. Readers can track the vendor’s security posture, understand recurring weakness classes like cryptographic weaknesses and improper input validation, and review the vulnerability history across Aqara products.

Found 3 results / 10 Clear Filters

Top products by Aqara: Aqara IAM/SSO Gateway Aquara IAM/SSO Gateway Cloud OAuth Authorization Endpoint com.lumiunited.aqarahome Cloud Production API Board service Cloud Developer Portal Aqara Developer Portal

CVE ID	Title	CVSS	Severity	Published
CVE-2026-50089	Aqara IAM/SSO Gateway open redirect — Aqara IAM/SSO Gateway CWE-601	6.1	Medium	2026-06-12
CVE-2026-50087	Aqara IAM/SSO Gateway cross-origin resource sharing — Aqara IAM/SSO Gateway CWE-942	8.2	High	2026-06-12
CVE-2026-50086	Aqara unauthenticated AES oracle — Aqara IAM/SSO Gateway CWE-327	10.0	Critical	2026-06-12

This page lists every published CVE security advisory associated with Aqara. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.