VulnSocial

CVE-2026-50090PoC(aqara / cloud_oauth_authorization_endpoint)

LOWCVSS 6.1 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch aqara cloud_oauth_authorization_endpoint systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of "CWE-1289: Improper Validation of Unsafe Equivalence in Input" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N (9.3 Critical).

aqara CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-1289

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_oauth_authorization_endpoint

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-13); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
aqara
Products
cloud_oauth_authorization_endpoint

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-13: 1Mentions · 2026-06-27: 1PoC Mentioned / Linked · 2026-06-13: 1Patch / Workaround · 2026-06-13: 1Technical Details · 2026-06-13: 106-1306-27
Signal classification2 categories
PoC
150.0%
General
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-06-131
PoC1
2026-06-271
General1
Full discourse2 posts
  • Sammy Azdoufal@n0tsa
    General

    CVE-2026-50082 CVE-2026-50083 CVE-2026-50084 CVE-2026-50085 CVE-2026-50086 CVE-2026-50087 CVE-2026-50088 CVE-2026-50089 CVE-2026-50090 CVE-2026-50091

    Post summary

    The text is a simple enumeration of CVE identifiers without additional details or contextual information.

    00020393
    11.8K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    PoC

    CVE-2026-50090 - Critical Open Redirect in Aqara Cloud OAuth. CVSS 9.3. Bypass allows phishing & session theft. Disable OAuth integration until fixed. #CVE #Aqara #infosec #CVEAlert #cybersecurity FREE portal with all Rules and POC Labs: https://www.valtersit.com/cve/CVE-2026-50090/

    Post summary

    CVE-2026-50090 is a critical open‑redirect flaw in Aqara Cloud OAuth with a CVSS of 9.3; a PoC is available via the linked portal, and users are advised to disable OAuth until a fix is applied.

    0000068
    929 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appaqaracloud_oauth_authorization_endpoint2026-04-20--

Explore more

Back to dashboardaqara CVEscloud_oauth_authorization_endpoint vulnerabilities