runZero, Inc.
First CVE: Apr 7, 2026Active for: 1 year
35
CVEs Published
More CVEs Published than 50% of tracked CNAs
35.0
Avg CVEs / Year
More Avg CVEs / Year than 79% of tracked CNAs
6.3
Avg CVSS Score
Higher Avg CVSS Score than 17% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by runZero, Inc. as a CNA, 34.3% affect products that runZero, Inc. develops as a vendor.
34.3%
65.7%
Self-reported: 12Third-party: 23
Of all the CVEs published that affect products developed by runZero, Inc., 100.0% are self-published by runZero, Inc. as a CNA.
100.0%
Self-published: 12Published by other CNAs: 0
Trends Over Time
The number and severity of CVEs published by runZero, Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 7, 2026
3 months ago
Most Recent CVE
Jul 1, 2026
23 days ago
Top CVEs
All CVEs published by runZero, Inc. as a CNA, regardless of affected vendor or product.
35 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-50086CRITICAL The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: M | Jun 12, 2026 | 9.8 | 40 | NO | NO |
CVE-2026-50085CRITICAL The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the platfom's HiveMQ broker without authentication. This is an instance of | Jun 12, 2026 | 9.8 | 40 | NO | NO |
CVE-2026-6682HIGH In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-controlled file-size metadata and unsafe | Jul 1, 2026 | 7.6 | 38 | NO | NO |
CVE-2026-50083CRITICAL The Aqara IAM/SSO Gateway (gw-builder.aqara.com) used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estim | Jun 12, 2026 | 9.8 | 38 | NO | NO |
CVE-2026-6688HIGH FatFs R0.16 and earlier contains a downstream-caller vulnerability pattern associated with FatFs long filename handling. With LFN enabled, fno.fname can be up to 255 characters; ma | Jul 1, 2026 | 7.6 | 36 | NO | NO |
CVE-2026-6687HIGH FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label length (XDIR_NumLabel) is trusted without enforcing spec maximums. This maps to CWE-121 (S | Jul 1, 2026 | 7.6 | 36 | NO | NO |
CVE-2026-50091HIGH Aqara Home Android (com.lumiunited.aqarahome) 6.0.0 (and white-label clients embedding the same liblumidevsdk.so) uses hard-coded cryptographic keys, which is an instance of "CWE-3 | Jun 12, 2026 | 7.4 | 32 | NO | NO |
CVE-2026-33362HIGH In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secre | May 11, 2026 | 8.6 | 32 | NO | NO |
CVE-2026-50090MEDIUM The Aqara Cloud OAuth Authorization Endpoint (open-cn.aqara.com/oauth/authorize) is vulnerable to a redirect bypass due to lax controls on domain matching, which is an instance of | Jun 12, 2026 | 6.1 | 30 | NO | NO |
CVE-2026-50087MEDIUM The Aqara IAM/SSO gateway (gw-builder.aqara.com) exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrus | Jun 12, 2026 | 6.1 | 30 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA35 CVEs
11%
49%
31%
9%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network29 (82.9%)
Unknown0 (0.0%)
Physical6 (17.1%)
Adjacent Network0 (0.0%)
Attack Complexity
Low24 (68.6%)
High11 (31.4%)
Unknown0 (0.0%)
User Interaction
None28 (80.0%)
Unknown0 (0.0%)
Required7 (20.0%)
Privileges Required
Low3 (8.6%)
High11 (31.4%)
None21 (60.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (35 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by runZero, Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by runZero, Inc. as a CNA — matched by CVE ID, not by organization name.