Threats tagged 'ghsa-xj5r-68hv-vxqx'

CVE-2026-101104 is an authorization vulnerability in the Meari IoT Cloud Platform OpenAPI Service. Authenticated users can manipulate device configurations for devices they do not own due to missing authorization checks. This flaw allows unauthorized changes to device settings or triggering unintended device behaviors without verifying user permissions. The vulnerability has a CVSS 4.0 score of 6.3, indicating medium severity. No affected versions or patch information are provided. There are no known exploits in the wild at this time.