Search: CVE-2026-50082

CVE-2026-50082 is a vulnerability in the Aqara Cloud Developer Portal that allows issuance of developer tokens to any email address supplied by an attacker, due to missing authentication for a critical function. This flaw is classified under CWE-306. It has a CVSS 3.1 base score of 6.5 (medium severity). When combined with other related vulnerabilities (CVE-2026-50083, CVE-2026-50084, CVE-2026-50085), it could enable an unauthenticated attacker to fully take over affected devices.