{"id":"CVE-2026-101104","published":"2026-10-02T16:16:42.883","lastModified":"2026-10-03T16:16:31.253","description":"The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering unintended behaviors, without verifying ownership or permissions.","cvssScore":7.7,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-06.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06","tags":[]},{"url":"https://www.meari.com/en/downLoadCenter","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-06.json","tags":[]}],"hasPoc":true,"ai":{"summary":"The Meari IoT Cloud Platform allows authenticated users to modify device configurations they don't own due to insufficient authorization checks. This authorization flaw enables attackers to manipulate unauthorized devices and potentially trigger unintended behaviors or settings changes.","exploitability":"Exploitation is moderately easy requiring only an authenticated session with access to the OpenAPI service, with no additional preconditions needed beyond basic user credentials.","blast_radius":"If exploited, this vulnerability could allow attackers to compromise multiple IoT devices across different user accounts, potentially leading to unauthorized surveillance, device manipulation, or further lateral movement within connected IoT ecosystems.","remediation":"Disable the affected OpenAPI endpoints until a patch is available, or restrict access to these endpoints using network segmentation and authentication controls.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["iot","auth-bypass","api"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:52:30.196Z"}}