XI
Vendor
Xiaomi
23
CVEs
0
On KEV
0
New 30D
Products
XR9.8
Xiaomi router
Xiaomi
4 CVEs0 on KEV0 new
GA9.8
GetApps application
Xiaomi
3 CVEs0 on KEV0 new
P19.6
Pro 13
Xiaomi
2 CVEs0 on KEV0 new
XM9.6
Xiaomi Mi Connect Service
Xiaomi
2 CVEs0 on KEV0 new
AM9.8
App Market
Xiaomi
1 CVEs0 on KEV0 new
FI9.8
Fileexplorer
Xiaomi
1 CVEs0 on KEV0 new
GC7.8
Game center application
Xiaomi
1 CVEs0 on KEV0 new
MM–
Mitalk Messenger
Xiaomi
1 CVEs0 on KEV0 new
QA4.3
quick app framework
Xiaomi
1 CVEs0 on KEV0 new
RA8.8
Router AX9000
Xiaomi
1 CVEs0 on KEV0 new
XF9.8
Xiaomi File Manager App International Version
Xiaomi
1 CVEs0 on KEV0 new
XP5.5
Xiaomi phone framework
Xiaomi
1 CVEs0 on KEV0 new
XP7.3
Xiaomi phone framework has unauthorized access vulnerability
Xiaomi
1 CVEs0 on KEV0 new
XR8.8
Xiaomi Router AX9000
Xiaomi
1 CVEs0 on KEV0 new
XS4.3
Xiaomi shop application
Xiaomi
1 CVEs0 on KEV0 new
XS8.8
Xiaomi smarthome application
Xiaomi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29515 | FI Fileexplorer Xiaomi | 9.8 | Mar 11 | MiCode FileExplorer SwiFTP Server Authentication Bypass |
| CVE-2024-45347 | XM Xiaomi Mi Connect Service Xiaomi | 9.6 | Jun 23 | Mi Connect Service APP protocol flaws lead to unauthorized access |
| CVE-2024-45361 | XM Xiaomi Mi Connect Service Xiaomi | 6.5 | Mar 27 | Mi Connect Service APP protocol flaws lead to leaking sensitive user information |
| CVE-2024-45356 | XP Xiaomi phone framework has unauthorized access vulnerability Xiaomi | 7.3 | Mar 27 | Xiaomi phone framework has unauthorized access vulnerability |
| CVE-2024-45355 | XP Xiaomi phone framework Xiaomi | 5.5 | Mar 27 | Xiaomi phone framework has unauthorized access vulnerability |
| CVE-2024-45354 | XS Xiaomi shop application Xiaomi | 4.3 | Mar 27 | xiaomi shop application Webview has code execution vulnerability |
| CVE-2024-45353 | QA quick app framework Xiaomi | 4.3 | Mar 27 | quick App has intent redriction vulnerability |
| CVE-2024-45352 | XS Xiaomi smarthome application Xiaomi | 8.8 | Mar 27 | Xiaomi smarthome application Webview has code execution vulnerability |
| CVE-2024-45351 | GC Game center application Xiaomi | 7.8 | Mar 26 | Game center application has code execution Vulnerability |
| CVE-2024-45348 | XR Xiaomi Router AX9000 Xiaomi | 8.8 | Sep 23 | Xiaomi Router AX9000 has a post-authorization command injection vulnerability |
| CVE-2023-26322 | GA GetApps application Xiaomi | 9.8 | Aug 28 | GetApps application has code execution vulnerability |
| CVE-2023-26323 | AM App Market Xiaomi | 9.8 | Aug 28 | Xiaomi App Market has a code execution vulnerability |
| CVE-2023-26321 | XF Xiaomi File Manager App International Version Xiaomi | 9.8 | Aug 28 | The international version of Xiaomi File Manager has a path traversal vulnerability |
| CVE-2023-26324 | GA GetApps application Xiaomi | 9.8 | Aug 28 | GetApps application has code execution vulnerability |
| CVE-2024-45346 | GA GetApps application Xiaomi | 8.8 | Aug 28 | GetApps application has code execution vulnerability |
| CVE-2023-26315 | RA Router AX9000 Xiaomi | 8.8 | Aug 26 | Xiaomi router has a command injection vulnerability after authorization |
| CVE-2024-4406 | P1 Pro 13 Xiaomi | 9.6 | May 2 | Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability |
| CVE-2024-4405 | P1 Pro 13 Xiaomi | 9.6 | May 2 | Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability |
| CVE-2023-26320 | XR Xiaomi Router Xiaomi | 8.1 | Oct 11 | Xiaomi Router external request interface vulnerability leads to stack overflow |
| CVE-2023-26319 | XR Xiaomi Router Xiaomi | 7.2 | Oct 11 | Xiaomi Router administration interface vulnerability leads command injection and stack overflow |
| CVE-2023-26318 | XR Xiaomi Router Xiaomi | 7.2 | Oct 11 | Xiaomi router web interface post-authorization stack overflow |
| CVE-2023-26317 | XR Xiaomi router Xiaomi | 9.8 | Aug 2 | Xiaomi router external request interface has command injection |
| CVE-2011-4697 | MM Mitalk Messenger Xiaomi | – | Jan 25 | The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging… |
