VulnSocial

CVE-2026-50086Disclosure(aqara / iam\/sso_gateway)

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for aqara iam\/sso_gateway systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authentication for Critical Function" and "CWE-327: Use of a Broken or Risky Cryptographic Algorithm," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (7.5 High).

aqara CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-327

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • iam\/sso_gateway

Threat summary

  • Active exploitation appears in 1 classified signals
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-06-13); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
aqara
Products
iam\/sso_gateway

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-06-12: 1Mentions · 2026-06-13: 2Mentions · 2026-06-27: 1Active Exploitation · 2026-06-13: 1Technical Details · 2026-06-12: 1Technical Details · 2026-06-13: 106-1206-1306-27
Signal classification3 categories
Disclosure
250.0%
Active Exploitation
125.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-121
Disclosure1
2026-06-132
Active Exploitation1Disclosure1
2026-06-271
General1
Full discourse4 posts
  • SecAlerts@SecAlertsCo
    Disclosure

    🔑 CVE-2026-50086: Aqara's IAM/SSO gateway exposes an unauthenticated AES oracle against its platform signing key. No credentials needed to abuse it. CVSS 10. If you use Aqara, check now. https://secalerts.co/vulnerability/CVE-2026-50086 https://t.co/6swhOYzXof

    Post summary

    Aqara IAM/SSO gateway is vulnerable to an unauthenticated AES oracle attack, CVSS 10, with no credentials required. A link to a vulnerability advisory is provided.

    111101.3K
    835 followersView on X
  • Sammy Azdoufal@n0tsa
    General

    CVE-2026-50082 CVE-2026-50083 CVE-2026-50084 CVE-2026-50085 CVE-2026-50086 CVE-2026-50087 CVE-2026-50088 CVE-2026-50089 CVE-2026-50090 CVE-2026-50091

    Post summary

    The post only lists a series of CVE identifiers with no additional information about exploitation, patches, or technical specifics.

    00020393
    11.8K followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    Some increased actor activities are shown targeting Aqara IAM SSO Gateway (CVE-2026-50086) https://vuldb.com/vuln/370634/cti

    Post summary

    The post indicates actor activity targeting CVE‑2026‑50086 on the Aqara IAM SSO Gateway, with a link to vulnerability data, but lacks any PoC, exploit code, or patch information.

    0000078
    2.2K followersView on X
  • ThreatCluster@threatcluster
    Disclosure

    CVE-2026-50086 in the Aqara IAM/SSO gateway at http://gw-builder.aqara.com allows unauthenticated AES use of the platform signing key to forge tokens, with a CVSS base score of 10.0, according to the European Vulnerability Database. https://threatcluster.io/cluster/critical-vulnerability-in-aqara-iamsso-gateway-exposes-signi-e5ebd438

    Post summary

    The announcement reports CVE-2026-50086 in the Aqara IAM/SSO gateway, detailing the flaw (unauthenticated AES use of the signing key to forge tokens) and its CVSS score, but does not provide PoC, exploit code, or patch information.

    0000062
    330 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appaqaraiam\/sso_gateway2026-04-20--

Explore more

Back to dashboardaqara CVEsiam\/sso_gateway vulnerabilities