Advisories · Technology

Aqara IAM/SSO Gateway.

Every CVE that names Aqara IAM/SSO Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-50089 CVE record

CVSS 6.1 Medium

Aqara IAM/SSO Gateway open redirect
- Aqara IAM/SSO Gateway
- Open redirect
Not analysed yet 12 Jun 2026
CVE-2026-50087 CVE record

CVSS 8.2 High

Aqara IAM/SSO Gateway cross-origin resource sharing
- Aqara IAM/SSO Gateway
- CWE-942
Not analysed yet 12 Jun 2026
CVE-2026-50086 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Aqara unauthenticated AES oracle
- Aqara IAM/SSO Gateway
- Weak cryptography or TLS
Not analysed yet 12 Jun 2026