CVE-2026-33362

Published May 11th, 2026

View on NVD ↗

CVSS v3

8.6

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded and shared, including API signing material, password-transport keying, and service access keys.

xn0tsa/nobody-puts-baby-in-a-corner

Five CVEs against Meari/CloudEdge IoT camera platform — public disclosure 2026-05-11

GitHub