Controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile1 entries
2025
Aqara gateways found to upload unencrypted sensitive information without consent
The Aqara Camera Hub G3 and Hub M2/M3 were reported to automatically upload unencrypted sensitive information without disclosure or consent (CVE-2025-65297), and to have other vulnerabilities including missing firmware signature verification and an unlogged remote access mechanism that could enable remote code execution (CVE-2025-65294/65295). The issues are listed in the NVD, and a firmware update is recommended.