A
Vendor security profile
aqara
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical4
CISA KEV0
Public exploit17
Patch rate%0
Avg. CVSS7.3
12-month vulnerability rate
0
8
0
0
0
0
0
10
0
0
0
0
CVE KEV
CVE severity distribution
18toplam CVE
Critical4 (22%)
High6 (33%)
Medium8 (44%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%94
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
18Unknown
Latest vulnerabilities
7.4
CVE-2026-50091
Use of hard-coded credentials in Aqara Home
A
Patch status unknown Public Exploits:2EPSS %0
6.1
CVE-2026-50090
Vulnerability in Aqara Cloud Oauth Authorization Endpoint
A
Patch status unknown Public Exploits:2EPSS %0
6.1
CVE-2026-50089
Open redirect in Aqara Iam/sso Gateway
A
Patch status unknown Public Exploits:2EPSS %0
4.7
CVE-2026-50088
Vulnerability in Aqara Developer Portal
A
Patch status unknown Public Exploits:2EPSS %0
6.1
CVE-2026-50087
Vulnerability in Aqara Iam/sso Gateway
A
Patch status unknown Public Exploits:2EPSS %0
9.8
CVE-2026-50086
Broken cryptographic algorithm in Aqara Iam/sso Gateway
A
Patch status unknown Public Exploits:1EPSS %0
9.8
CVE-2026-50085
Missing authentication in Aqara Board Service
A
Patch status unknown Public Exploits:2EPSS %1
6.5
CVE-2026-50084
Missing authorization in Aqara Cloud Production API
A
Patch status unknown Public Exploits:2EPSS %0
9.8
CVE-2026-50083
Use of hard-coded credentials in Aqara Iam/sso Gateway
A
Patch status unknown Public Exploits:2EPSS %1
5.3
CVE-2026-50082
Missing authentication in Aqara Cloud Developer Portal
A
Patch status unknown Public Exploits:2EPSS %0