Xiaomi

Latest CVEs · RSS

• CVE-2024-45347 2025-06-23 · CVSS 9.6
  An unauthorized access vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be explo
• CVE-2024-45361 2025-03-27 · CVSS 6.5
  A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by
• CVE-2024-45356 2025-03-27 · CVSS 7.3
  A unauthorized access vulnerability exists in the Xiaomi phone framework. The vulnerability is caused by improper validation and can be exploited by attackers t
• CVE-2024-45355 2025-03-27 · CVSS 5.5
  A unauthorized access vulnerability exists in the Xiaomi phone framework. The vulnerability is caused by improper validation and can be exploited by attackers t
• CVE-2024-45354 2025-03-27 · CVSS 4.3
  A code execution vulnerability exists in the Xiaomi shop applicationproduct. The vulnerability is caused by improper input validation and can be exploited by at
• CVE-2024-45353 2025-03-27 · CVSS 4.3
  An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and ca
• CVE-2024-45352 2025-03-27 · CVSS 8.8
  An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploite
• CVE-2024-45351 2025-03-26 · CVSS 7.8
  A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploi
• CVE-2024-45348 2024-09-23 · CVSS 6.4
  Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an atta
• CVE-2023-26322 2024-08-28 · CVSS 8.8
  A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an at
• CVE-2023-26323 2024-08-28 · CVSS 7.6
  A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to
• CVE-2023-26321 2024-08-28 · CVSS 6.3
  A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special c
• CVE-2023-26324 2024-08-28 · CVSS 8.8
  A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an at
• CVE-2024-45346 2024-08-28 · CVSS 8.8
  The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same ti
• CVE-2023-26315 2024-08-26 · CVSS 6.5
  The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an att
• CVE-2023-26320 2023-10-11 · CVSS 7.5
  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
• CVE-2023-26319 2023-10-11 · CVSS 6.7
  Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
• CVE-2023-26318 2023-10-11 · CVSS 6.7
  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.
• CVE-2023-26317 2023-08-02 · CVSS 7.0
  Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces
• CVE-2023-26316 2023-08-02
  A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking function allowing javasc
• CVE-2020-14140 2023-03-29
  When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by the
• CVE-2020-14131 2022-10-11
  The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security exper
• CVE-2020-14129 2022-10-11
  A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who can
• CVE-2020-14114 2022-07-22
  information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can b
• CVE-2020-14126 2022-07-22
  Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploi