Xiaomi Technology Co., Ltd. maintains a focused vulnerability footprint around its MiTalk messenger product, with the observed signal centered on information-disclosure, authentication, and authorization weaknesses typical of communication platforms. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Xiaomi Technology Co., Ltd. over time
Of all the CVEs published by Xiaomi Technology Co., Ltd. as a CNA, 0.0% affect products that Xiaomi Technology Co., Ltd. develops as a vendor.
Of all the CVEs published that affect products developed by Xiaomi Technology Co., Ltd., 0.0% are self-published by Xiaomi Technology Co., Ltd. as a CNA.
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-29515CRITICAL MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. A | Mar 11, 2026 | 9.8 | 35 | NO | NO |
CVE-2011-4697MEDIUM The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging in | Jan 25, 2012 | 6.4 | 19 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Xiaomi Technology Co., Ltd..
Media articles that mention a CVE ID that affects a product developed by Xiaomi Technology Co., Ltd. — matched by CVE ID, not by vendor name.