How many CVEs does Aqara have?

Aqara has 18 published CVE records since 2025, including 18 in the last two years.

How many Aqara CVEs are in CISA KEV?

None of Aqara's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Aqara products have the most CVEs?

The Aqara products with the most published CVEs are camera hub g3, camera hub g3 firmware, hub m2, hub m3, hub m2 firmware.

What are the most common weakness types in Aqara CVEs?

Aqara's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-306 (Missing Authentication for Critical Function), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-942 (Permissive Cross-domain Security Policy with Untrusted Domains).

Are there public exploits for Aqara vulnerabilities?

Yes — 10 of Aqara's CVEs have a known public exploit.

How many critical Aqara vulnerabilities are there?

Aqara has 7 critical and 7 high-severity CVEs.

What is the average severity of Aqara CVEs?

The average CVSS base score across Aqara's scored CVEs is 8.2.

Aqara Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 8.2
Critical / high: 78%
Actively exploited (KEV): 0%
Public exploit available: 56%
Patch available: 0%

Aqara Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest Aqara CVEs

Other vendors

Frequently asked questions

References

Track Aqara vulnerabilities