YoSmart vulnerabilities
6 published CVEs name YoSmart among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-59452
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information,…
YoSmart · YoLink API
Medium5.8 - CVE-2025-59451
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes.
YoSmart · YoLink application
Low3.5 - CVE-2025-59450
The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials.
YoSmart · YoLink Smart Hub
Medium4.3 - CVE-2025-59449
The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to…
YoSmart · YoLink MQTT broker
Medium4.9 - CVE-2025-59448
Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to…
YoSmart · YoLink ecosystem
Medium4.7 - CVE-2025-59447
The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot…
YoSmart · YoLink Smart Hub
Low2.2