PT-2026-48911

The Aqara IAM/SSO gateway gw-builder.aqara.com exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 8.2 High...

PT-2026-44998

Name of the Vulnerable Software and Affected Versions ExtremeCloud IQ affected versions not specified Description A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path can intermittently allow requests authenticated with an Extreme Platform ONE /IAM-issued AP...

Weak Password, SQL Injection Vulnerabilities in IAM Gateway Console

Shanghai Andatom Information Security Technology Co., Ltd. is a company engaged in the research, development, production and sales of VPN security gateways, VPN network management platforms, identity authentication products and network behavior management systems. Weak password and SQL injection...