YoSmart YoLink API vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting YoSmart YoLink API: 1 record(s), with affected versions and fixes.
CVE-2025-59452
Medium · 5.8
CWE-340 Oct 6, 2025
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a…
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.