B3NCLOUD ARTICLE INTELLIGENCE

ARTICLEVIEW

Zurück zu News

CVE-2026-50090 - Aqara OAuth redirect_uri validation bypass

CVE ID :CVE-2026-50090 Published : June 12, 2026, 4:16 p.m. | 51 minutes ago Description :The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper...

Original-Artikel öffnen Zurück zur Übersicht