A
Aqara
Security Risk Profile
64
/100
highSecurity Risk Score
Comprehensive risk assessment based on 18 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 10, 2025 to present
18
Total CVEs
14
Critical+High
0
Exploited
14
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
14
Critical/High
Risk Level
64/100
high
Severity Distribution
Critical
7High
7Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Command Injection
2
2
Code Injection
1
3
Weak Encryption
1
4
Null Pointer Dereference
1
Most Affected Products
1. Aqara Camera Hub G3 Firmware8
2. Aqara Hub M27
3. Aqara Hub M37
4. Aqara Camera Hub G37
5. Aqara Hub M2 Firmware7
Recent Vulnerabilities
See more →CVE-2026-50091
CVSS 9.1critical
Aqara Home Android SDK hardcoded keys
Jun 12, 2026🔧 No Patch
CVE-2026-50090
CVSS 9.3critical
Aqara OAuth redirect_uri validation bypass
Jun 12, 2026🔧 No Patch
CVE-2026-50089
CVSS 6.1medium
Aqara IAM/SSO Gateway open redirect
Jun 12, 2026🔧 No Patch
CVE-2026-50088
CVSS 8.2high
Aqara Developer Portal cross-origin resource sharing
Jun 12, 2026🔧 No Patch
CVE-2026-50087
CVSS 8.2high
Aqara IAM/SSO Gateway cross-origin resource sharing
Jun 12, 2026🔧 No Patch
CVE-2026-50086
CVSS 10.0critical
Aqara unauthenticated AES oracle
Jun 12, 2026🔧 No Patch
CVE-2026-50085
CVSS 9.8critical
Aqara Board IoT insecure debug API
Jun 12, 2026🔧 No Patch
CVE-2026-50084
CVSS 9.6critical
Aqara API cross-account access
Jun 12, 2026🔧 No Patch
CVE-2026-50083
CVSS 9.8critical
Aqara hardcoded OAuth client credentials
Jun 12, 2026🔧 No Patch
CVE-2026-50082
CVSS 6.5medium
Aqara Developer Portal insecure authentication token
Jun 12, 2026🔧 No Patch
Monitor Aqara in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.