Will Meari IoT Cloud Platform OpenAPI vulnerabilities be added to CISA KEV by Dec 2026?

CISA Alerts reports multiple vulnerabilities in Meari IoT Cloud Platform OpenAPI that could allow attackers to manipulate device configurations, access sensitive credentials and device data. No confirmation yet of active exploitation or KEV listing. Resolution: CISA officially adds any of the Meari OpenAPI CVEs to the Known Exploited Vulnerabilities Catalog.

Resolution Criteria

CISA KEV Catalog entry confirming one or more Meari IoT Cloud Platform OpenAPI CVE(s) listed as known exploited; verified via official CISA KEV page or CISA Alerts summary.