CVE-2026-50082
Published Jun 12, 2026The Aqara Cloud Developer Portal (developer.aqara.com) issued a developer token to any email address supplied by the attacker. This is an instance of "CWE-306: Missing Authenticat…
- evidence mentions
- 2
- Buzz score
- 22.0