CVE-2026-50084 - Aqara API cross-account access
CVE ID :CVE-2026-50084 Published : June 12, 2026, 4:16 p.m. | 51 minutes ago Description :The Aqara Cloud Production API (open-cn.aqara.com/v3.0/open/api) would authorize any valid developer token for access to any account. This is an instance of "CWE-862: Missing Authorization" with an...