CVE-2026-33359 — Meari unauthenticated alert image access in cloud object storage
In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed U…
Published: 2026-05-11 · CVSS: 7.5 · CVSS 3.1
In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7