Skip to content
OpenAdvisories

Vendor

YoSmart

6 known vulnerabilities.

Products

YoLink Smart Hub 2 YoLink ecosystem 1 YoLink application 1 YoLink API 1 YoLink MQTT broker 1 server 0 YoLink Mobile Appication 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-59448

    Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the interne…

    YoSmart YoLink ecosystem
  • Medium 4.9
    CVE-2025-59449

    The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-a…

    YoSmart YoLink MQTT broker
  • Medium 5.8
    CVE-2025-59452

    The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with a…

    YoSmart YoLink API
  • Medium 4.3
    CVE-2025-59450

    The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network …

    YoSmart YoLink Smart Hub