Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and has an estimated CVSS ofCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L (8.6 High). When combined with CVE-2026-50082, CVE-50083, and CVE-50084, this can lead to a fully unauthenticated, remote takeover of affected devices.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-50082 CVE-2026-50083 CVE-2026-50084 CVE-2026-50085 CVE-2026-50086 CVE-2026-50087 CVE-2026-50088 CVE-2026-50089 CVE-2026-50090 CVE-2026-50091
Post summary
The text provides a list of CVE identifiers without any further details or context.
#CVE-2026-50085 - Unauthenticated MQTT command injection in #Aqara Board service. #CVSS 8.6. Remote device takeover possible when chained with other flaws. Monitor and isolate affected systems. #infosec #cyber #cybersecurity #devsecops More info: https://www.valtersit.com/cve/CVE-2026-50085
Post summary
The tweet announces CVE‑2026‑50085 as an unauthenticated MQTT command injection with a CVSS of 8.6 and potential remote takeover, but offers no PoC, exploit code, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | aqara | board_service | 2026-04-20 | - | - |