VYPR

YoLink devices

by YoSmart

CVEs (1)

  • CVE-2025-59449MedOct 6, 2025
    risk 0.32cvss 4.9epss 0.00

    The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to remotely operate affected devices if the attacker obtains the associated device IDs. Because YoLink device IDs are…