Aqara Iam/sso Gateway — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 12, 2026
Last Seen
June 13, 2026

Aqara Iam/sso Gateway is a technology platform tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed June 12, 2026; most recent activity June 13, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2026-50086 AKAOMA CVE VULNERABILITIES / 11h The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Broken or Risky Cryptographic Algorithm," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High). — cve.akaoma.com · June 13, 2026
  • CVE-2026-50086 - Exploits & Severity — Feedly · June 12, 2026

Related Entities

Zero-day Exploit Aqara CVE-2026-50086 CWE-287 - Improper Authentication Cwe-306 - Missing Authentication For Critical Function Cwe-327 - Use Of A Broken Or Risky Cryptographic Algorithm

CVSS v3.1 Breakdown