CVE-2026-50088

Name of the Vulnerable Software and Affected Versions Aqara Developer Portal (affected versions not specified)

Description The Aqara Developer Portal (developer.aqara.com) and shared test environments (developer-test.aqara.com, aiot-test.aqara.com) exhibit permissive cross-origin request sharing. This is an instance of a permissive cross-domain policy with untrusted domains, which allows requests from unauthorized origins to access resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.