The Meari IoT Cloud Platform OpenAPI Service has an authorization flaw allowing authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information such as device credentials, owner details, network data, and telemetry. Defenders should assess potential exposure and implement additional authentication and authorization contro [truncated]
CVE-2026-101104 debrief based on the supplied source corpus. The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate device configurations without verifying ownership or permissions. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering unintended behaviors, without veri [truncated]
