Xiaomi vulnerabilities

Products

• Router 4
• Browser 3
• Getapps Application 3
• Getapps Application 3
• Router 3
• Router R3600 3
• Pro 13 2
• Pro 13 2
• Mi Connect Service 2

Newest

• micode fileexplorer MiCode FileExplorer SwiFTP Server Authentication Bypass CVE-2026-29515 9.3 CriticalMarch 11, 2026
• xiaomi mi connect service Mi Connect Service APP protocol flaws lead to unauthorized access CVE-2024-45347 9.6 CriticalJune 23, 2025
• xiaomi mi connect service Mi Connect Service APP protocol flaws lead to leaking sensitive user information CVE-2024-45361 6.5 MediumMarch 27, 2025
• xiaomi phone framework has unauthorized access vulnerability Xiaomi phone framework has unauthorized access vulnerability CVE-2024-45356 7.3 HighMarch 27, 2025
• xiaomi phone framework Xiaomi phone framework has unauthorized access vulnerability CVE-2024-45355 5.5 MediumMarch 27, 2025
• xiaomi shop application xiaomi shop application Webview has code execution vulnerability CVE-2024-45354 4.3 MediumMarch 27, 2025
• xiaomi quick app framework quick App has intent redriction vulnerability CVE-2024-45353 4.3 MediumMarch 27, 2025
• xiaomi smarthome application Xiaomi smarthome application Webview has code execution vulnerability CVE-2024-45352 Public exploit 8.8 HighMarch 27, 2025
• xiaomi game center application Game center application has code execution Vulnerability CVE-2024-45351 7.8 HighMarch 26, 2025
• xiaomi router ax9000, mi ax9000 firmware +1 more Xiaomi Router AX9000 has a post-authorization command injection vulnerability CVE-2024-45348 6.4 MediumSeptember 23, 2024
• mi getapps, xiaomi getapps application +1 more GetApps application has code execution vulnerability CVE-2023-26322 8.8 HighAugust 28, 2024
• mi app market Xiaomi App Market has a code execution vulnerability CVE-2023-26323 7.6 HighAugust 28, 2024
• mi file manager, xiaomi file manager app international version +1 more The international version of Xiaomi File Manager has a path traversal vulnerability CVE-2023-26321 6.3 MediumAugust 28, 2024
• mi getapps, xiaomi getapps application +1 more GetApps application has code execution vulnerability CVE-2023-26324 8.8 HighAugust 28, 2024
• xiaomi getapps application GetApps application has code execution vulnerability CVE-2024-45346 8.8 HighAugust 28, 2024
• xiaomi router ax9000, mi ax9000 firmware +1 more Xiaomi router has a command injection vulnerability after authorization CVE-2023-26315 EPSS 19.4% 6.5 MediumAugust 26, 2024
• xiaomi pro 13, mi xiaomi 13 pro firmware +1 more Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability CVE-2024-4406 Public exploit 8.8 HighMay 2, 2024
• xiaomi pro 13, mi xiaomi 13 pro firmware +1 more Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability CVE-2024-4405 8.8 HighMay 2, 2024
• xiaomi router, mi xiaomi router ax3200 firmware +1 more Xiaomi Router external request interface vulnerability leads to stack overflow CVE-2023-26320 7.5 HighOctober 11, 2023
• xiaomi router, mi xiaomi router ax3200 firmware +1 more Xiaomi Router administration interface vulnerability leads command injection and stack overflow CVE-2023-26319 6.7 MediumOctober 11, 2023
• xiaomi router, mi xiaomi router ax3200 firmware +1 more Xiaomi router web interface post-authorization stack overflow CVE-2023-26318 6.7 MediumOctober 11, 2023
• xiaomi router, mi xiaomi router firmware +1 more Xiaomi router external request interface has command injection CVE-2023-26317 7.0 HighAugust 2, 2023
• xiaomi router r3600, mi r3600 firmware +1 more In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed,... CVE-2020-14100 9.8 CriticalSeptember 11, 2020
• xiaomi router r3600, mi xiaomi r3600 firmware +1 more In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the... CVE-2020-14094 9.8 CriticalJune 24, 2020
• xiaomi router r3600, mi xiaomi r3600 firmware +1 more In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection... CVE-2020-14095 9.8 CriticalJune 24, 2020
• lenovo browser This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... CVE-2019-13322 7.5 HighFebruary 10, 2020
• lenovo browser This vulnerability allows network adjacent attackers to execute arbitrary code on affected... CVE-2019-13321 5.5 MediumFebruary 10, 2020
• lenovo browser, mi mi6 browser +1 more This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations... CVE-2019-6743 7.8 HighJune 3, 2019
• xiaomi mitalk messenger The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not... CVE-2011-4697 6.4 MediumJanuary 25, 2012