Aqara Iam/sso Gateway

Platform

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

June 12, 2026

Last Seen

June 13, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

Critical Vulnerability in Aqara IAM/SSO Gateway Exposes Signing Key

Jun 13·2 sources

Related Articles (2)

CVE-2026-50086 AKAOMA CVE VULNERABILITIES / 11h The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Broken or Risky Cryptographic Algorithm," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High).

cve.akaoma.com·Jun 13

CVE-2026-50086 - Exploits & Severity

Related Entities

Zero-day Exploit Aqara CVE-2026-50086 CWE-287 - Improper Authentication Cwe-306 - Missing Authentication For Critical Function Cwe-327 - Use Of A Broken Or Risky Cryptographic Algorithm