Meari

7 CVEs in 4 Meari products, including Com.meari.sdk, Iot Cloud Platform Openapi Service, Alibaba Oss Hosted. Newest: CVE-2026-96613 (2026-10-02).

Meari products with known CVEs

ProductCVEs
Com.meari.sdk3
Iot Cloud Platform Openapi Service2
Alibaba Oss Hosted1
Iot Cloud Mqtt Broker Emqx1
Meari CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-96613Medium6.52026-10-02The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any…
CVE-2026-101104High7.72026-10-02The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices…
CVE-2026-33362High8.62026-05-11In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple se…
CVE-2026-33361High7.52026-05-11In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x)…
CVE-2026-33359High7.52026-05-11In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authen…
CVE-2026-33357High7.52026-05-11In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the int…
CVE-2026-33356High7.72026-05-11In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive teleme…