PT-2026-48910 · Aqara · Iam/Sso Gateway

Sammy Azdoufal + 1 · CVE-2026-50086 · Published 2026-06-12 · Updated 2026-07-09

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Aqara IAM/SSO gateway (affected versions not specified)

Description The IAM/SSO gateway at 'gw-builder.aqara.com' exposes an unauthenticated AES oracle, allowing bidirectional AES round-trips against the platform's signing key. This occurs due to missing authentication for a critical function and the use of a broken or risky cryptographic algorithm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2026-50086

Affected Products

Iam/Sso Gateway

References · 7

• 🔥 https://github.com/xn0tsa/theres-no-place-like-home · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-50086 · Security Note
• https://t.me/cveNotify/193674 · Telegram Post
• https://runzero.com/advisories/aqara-unauth-aes-oracle-cve-2026-50086 · Note
• https://t.me/CVEtracker/56707 · Telegram Post
• https://twitter.com/SecAlertsCo/status/2065518441369317812 · Twitter Post
• https://twitter.com/threatcluster/status/2065653563380867225 · Twitter Post