Meari Alibaba OSS Hosted vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Meari Alibaba OSS Hosted: 1 record(s), with affected versions and fixes.

CVE-2026-33359 High · 7.5 CWE-862 May 11, 2026

Meari unauthenticated alert image access in cloud object storage

In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows.