Search: CVE-2026-50084

CVE-2026-50084 is a critical missing authorization vulnerability in the Aqara Cloud Production API that allows any valid developer token to access any user account. This flaw can lead to complete compromise of confidentiality and integrity of affected accounts. The vulnerability has a CVSS score of 9.6 and is related to CWE-862. There is no official patch or remediation level currently stated. The vulnerability is not a cloud service issue and no known exploits are reported in the wild.