What’s Vulnerable › Products

Aqara IAM/SSO Gateway vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Aqara IAM/SSO Gateway version is affected

Latest Aqara IAM/SSO Gateway vulnerabilities

• CVE-2026-50089 — Aqara IAM/SSO Gateway open redirect (CVSS 6.1)
• CVE-2026-50087 — Aqara IAM/SSO Gateway cross-origin resource sharing (CVSS 6.1)
• CVE-2026-50086 — Aqara unauthenticated AES oracle (CVSS 9.8)
• CVE-2026-50083 — Aqara hardcoded OAuth client credentials (CVSS 9.8)