CVE-2026-33359highCWE-862

CVE-2026-33359: high-severity vulnerability in Meari Alibaba OSS Hosted

Meari unauthenticated alert image access in cloud object storage

Published

Follow this CVE+ Monitor Alibaba OSS Hosted

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.3%
In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Meari · Alibaba OSS Hosted