Aqara

Products

Product	CVEs	Exploited	Latest
Aqara IAM/SSO Gateway	3	–	Jun 12, 2026
Aqara Developer Test Portal	1	–	Jun 12, 2026
Aquara IAM/SSO Gateway	1	–	Jun 12, 2026
Board service	1	–	Jun 12, 2026
Cloud Developer Portal	1	–	Jun 12, 2026
Cloud OAuth Authorization Endpoint	1	–	Jun 12, 2026
Cloud Production API	1	–	Jun 12, 2026
Aqara Developer Portal	1	–	Jun 12, 2026
com.lumiunited.aqarahome	1	–	Jun 12, 2026

CVE-2026-50091 Critical 9.1 Aqara Home Android SDK hardcoded keys 0.3%
CVE-2026-50090 Critical 9.3 Aqara OAuth redirect_uri validation bypass 0.2%
CVE-2026-50089 Medium 6.1 Aqara IAM/SSO Gateway open redirect 0.2%
CVE-2026-50088 High 8.2 Aqara Developer Portal cross-origin resource sharing 0.2%
CVE-2026-50088 High 8.2 Aqara Developer Portal cross-origin resource sharing 0.2%
CVE-2026-50087 High 8.2 Aqara IAM/SSO Gateway cross-origin resource sharing 0.2%
CVE-2026-50086 Critical 10.0 Aqara unauthenticated AES oracle 0.3%
CVE-2026-50085 High 8.6 Aqara Board IoT insecure debug API 0.4%
CVE-2026-50084 Critical 9.6 Aqara API cross-account access 0.2%
CVE-2026-50083 Critical 9.1 Aqara hardcoded OAuth client credentials 0.4%
CVE-2026-50082 Medium 6.5 Aqara Developer Portal insecure authentication token 0.3%