Threats tagged 'ghsa-9m6x-pxxf-689m'

CVE-2026-96613 is an authorization vulnerability in the Meari IoT Cloud Platform OpenAPI Service. Authenticated users can access the full device shadow of any device by specifying its device ID without proper authorization checks. This flaw exposes sensitive data including device credentials, owner information, network details, and telemetry data. The vulnerability has a high severity rating with a CVSS score of 7.1. No affected versions or patch information are currently provided.