Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

com.lumiunited.aqarahome

Source -

CNA

CNA CVEs -

1

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
1Vulnerabilities found
CVE-2026-50091
Assigner-44488dab-36db-4358-99f9-bc116477f914
ShareView Details
Assigner-44488dab-36db-4358-99f9-bc116477f914
CVSS Score-9.1||CRITICAL
EPSS-Not Assigned
Published-12 Jun, 2026 | 15:02
Updated-12 Jun, 2026 | 17:16
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Aqara Home Android SDK hardcoded keys

Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-321: Use of Hard-coded Cryptographic Key" and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N (9.1 Critical).

Action-Not Available
Vendor-Aqara
Product-com.lumiunited.aqarahome
CWE ID-CWE-321
Use of Hard-coded Cryptographic Key