Skip to content
OpenAdvisories

Product · Aqara

Cloud OAuth Authorization Endpoint

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-50090

    Aqara OAuth redirect_uri validation bypass

    The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper Validation of Unsafe Equivalence in Input" and has an estim…

    Aqara Cloud OAuth Authorization Endpoint