IoTSharp vulnerabilities

CVEs whose affected-version data names the IoTSharp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111629Medium· 4.3

yesterday

IoTSharp through 3.6.1 Cross-Tenant Data Exposure via Customers and Devices APIs

IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read other tenants' data because Customers and Devices API handlers do not scope queries to the caller's tenant. Atta…

▾ SunlitIoTSharp · IoTSharpvia CVEORG