CVE-2026-78845
Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and…
- Risk score
- 69/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 27 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Aiot products Linkind Matter Smart Plug, OREiN Matter Smart Light Bulb, and Linkind Wi-Fi Smart Light Bulb have a remote code execution vulnerability via UPnP root description parsing. An attacker could exploit this to execute code remotely.
- Affected
- {'products': ['Linkind Matter Smart Plug', 'OREiN Matter Smart Light Bulb', 'Linkind Wi-Fi Smart Light Bulb'], 'packages': [], 'versions': ['1.01.32', '3.15.21', '3.30.17']}
- Fix
- Check the linked advisory for a fix
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.
Last activity 27 Oct 2026. Patch Forecast updates every hour.