Known Vulnerabilities for Home by Aqara
Listed below are 1 of the newest known vulnerabilities associated with "Home" by "Aqara".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73664 json | FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts a... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73555 json | vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validation_exception_handler in vllm/... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-73412 json | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix s... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-73411 json | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEscapeFunction in src/internal/unix/d... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-73218 json | Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in Auto-R... | Not Provided | 2026-08-11 | 2026-08-13 |
| CVE-2026-72581 json | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to m... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-71964 json | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that a... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-71249 json | 299Ko's public contact form (plugin/contact/controllers/ContactController.php, home) sets raw POST field values (name, firstn... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-70558 json | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and f... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-66747 json | Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the p... | Not Provided | 2026-08-05 | 2026-08-05 |