CVE-2026-78845: AiDot Linkind Matter Smart Plug vulnerability
Published Oct 27, 2026
·Updated
Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.
Affected Software
3 affected components
AiDot Linkind Matter Smart Plug=1.01.32
Aidot OREiN Matter Smart Light Bulb=3.15.21
Aidot Linkind Wi-Fi Smart Light Bulb=3.30.17
Event History
Oct 27, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
Which devices and firmware versions are identified as affected?
The affected products are Linkind Matter Smart Plug firmware 1.01.32, OREiN Matter Smart Light Bulb firmware 3.15.21, and Linkind Wi-Fi Smart Light Bulb firmware 3.30.17.
2
What network functionality is involved in exploitation?
The issue is triggered through parsing of a UPnP root description. Devices with UPnP exposure are relevant to triage.