Search: CVE-2026-50083

The Aqara IAM/SSO Gateway has a critical vulnerability due to the use of a hardcoded OAuth client credential (CWE-798). This flaw allows attackers to potentially compromise confidentiality and integrity without authentication or user interaction. The vulnerability has a CVSS score of 9.1 (critical). When combined with related vulnerabilities, it may enable a fully unauthenticated remote takeover of affected devices. No official patch or remediation guidance is currently available.