gw-builder.aqara.com

Domain

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 12, 2026

Last Seen

June 13, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Domain is part of a legitimate service and mentioned in the context of a vulnerability, not as attacker-controlled infrastructure

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Critical Vulnerability in Aqara IAM/SSO Gateway Exposes Signing Key

Jun 13·2 sources

Related Articles (2)

CVE-2026-50086 AKAOMA CVE VULNERABILITIES / 11h The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Broken or Risky Cryptographic Algorithm," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High).

cve.akaoma.com·Jun 13

CVE-2026-50086 - Exploits & Severity

Related Entities

Zero-day Exploit Aqara CVE-2026-50086 Cwe-306 - Missing Authentication For Critical Function Cwe-327 - Use Of A Broken Or Risky Cryptographic Algorithm CWE-287 - Improper Authentication Aqara Iam/sso Gateway