Skip to content
Aqara vulnerabilities
Newest
-
aqara com.lumiunited.aqarahome, home +1 more
Aqara Home Android SDK hardcoded keys
CVE-2026-50091
9.1 Critical
-
aqara cloud oauth authorization endpoint
Aqara OAuth redirect_uri validation bypass
CVE-2026-50090
9.3 Critical
-
aqara iam/sso gateway, iam\/sso gateway +1 more
Aqara IAM/SSO Gateway open redirect
CVE-2026-50089
6.1 Medium
-
aqara developer portal, developer test portal +1 more
Aqara Developer Portal cross-origin resource sharing
CVE-2026-50088
8.2 High
-
aqara iam/sso gateway, iam\/sso gateway +1 more
Aqara IAM/SSO Gateway cross-origin resource sharing
CVE-2026-50087
8.2 High
-
aqara iam/sso gateway, iam\/sso gateway +1 more
Aqara unauthenticated AES oracle
CVE-2026-50086
10.0 Critical
-
aqara board service
Aqara Board IoT insecure debug API
CVE-2026-50085
8.6 High
-
aqara cloud production api
Aqara API cross-account access
CVE-2026-50084
9.6 Critical
-
aqara aquara iam/sso gateway, iam\/sso gateway +1 more
Aqara hardcoded OAuth client credentials
CVE-2026-50083
9.1 Critical
-
aqara cloud developer portal
Aqara Developer Portal insecure authentication token
CVE-2026-50082
6.5 Medium
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025...
CVE-2025-65297
7.5 High
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
NULL-pointer dereference vulnerabilities in Aqara Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, and...
CVE-2025-65296
6.5 Medium
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027,...
CVE-2025-65295
8.1 High
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025...
CVE-2025-65294
9.8 Critical
-
aqara camera hub g3 firmware
Command injection vulnerabilities in Aqara Camera Hub G3 4.1.9_0027 allow attackers to execute...
CVE-2025-65293
6.6 Medium
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4...
CVE-2025-65292
7.3 High
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail...
CVE-2025-65291
7.4 High
-
aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 more
Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025...
CVE-2025-65290
7.4 High