Aqara Cloud CVE Chain (June 2026): What It Means for Local-First Users
Aqara's June 2026 cloud CVEs chain into an account-takeover path. Here's how the chain works, who's exposed, and why local Z2M/ZHA setups sit outside it.
~/archive $ ls -la
Archive
CVE
-
-
Aqara Hub Security Patch Status: Are the 2025 CVEs Fixed?
Three CVEs hit the Aqara Hub M2, M3, and Camera Hub G3 in December 2025. Here's what's actually patched, what's still unclear, and what to do.