Will Meari IoT Cloud Platform OpenAPI vulnerabilities be added to CISA KEV by end of October 2026?

CISA disclosed vulnerabilities in Meari IoT Cloud Platform OpenAPI Service allowing attackers to manipulate device configurations, trigger unauthorized behaviors, and exfiltrate device credentials, owner details, and network data without proper authorization.

Resolution Criteria

The specific Meari OpenAPI vulnerability (identified in the CISA alert by product name and description) is formally added to the CISA Known Exploited Vulnerabilities (KEV) catalog, or a CVE is assigned and exploited in documented attacks.