iot_cloud_platform_openapi_service vulnerabilities
CVEs whose affected-version data names the iot_cloud_platform_openapi_service package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-96613Medium· 6.5The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID
The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive info…
▾ SunlitMeari · IoT Cloud Platform OpenAPI Servicevia NVD
CVE-2026-101104High· 7.7The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own
The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized…
▾ TwilightMeari · IoT Cloud Platform OpenAPI Servicevia NVD