Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/02 4:16 p.m.•18 views

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

7.1CVSS0.00235EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/02 4:03 p.m.•27 views

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw (CWE-862) that allows authenticated users to access the complete device shadow of any device by specifying its device ID . The service fails to verify a relationship between the requester and the target device, le...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/02 4:03 p.m.•51 views

CVE-2026-96613 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

7.1CVSS0.00235EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/02 4:03 p.m.•28 views

EUVD-2026-91750

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/02 4:03 p.m.•11 views

CVE-2026-96613 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•14 views

CVE-2026-96613: Missing Authorization

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References2
Rows per page
Query Builder