PatchTheCVEboard service vulnerabilities and fixes
Recent CVEs affecting board service, with upgrade or downgrade steps. 1 tracked.
Also searched as: boardservice.
board service has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-06-12. Highest priority: CVE-2026-50085 (score 49/100).
- CVE-2026-50085 HIGH 8.6 DOWNGRADE The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the
FAQ
How do I fix board service vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is board service being exploited right now?
None of the tracked board service CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which board service CVE should I patch first?
CVE-2026-50085 currently ranks highest (49/100): The Aqara Board service (op-test.aqara.com) accepts arbitrary MQTT command payloads, and forwards them to the .