Aqara Cloud Oauth Authorization Endpoint — known CVE vulnerabilities

Every CVE whose affected-product data names Aqara Cloud Oauth Authorization Endpoint, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-50090 — CVSS 9.3 (critical): The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on…