Description
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YoSmart | YoLink API | ≤ 2025-10-02 | — |
Advisories 1
- ICSA-26-013-03 YoSmart YoLink Smart Hub CISA ICS & IT advisories · Jan 13, 2026