CameraRisk

Aqara Camera Hub G3

cpe:2.3:*:aqara:camera_hub_g3

Vendor
Aqara
Device type
IP camera
Published vulnerabilities
8
In CISA KEV
None
Affected versions recorded
1
Data last built
5 September 2026

Security summary

8 published vulnerabilities affect this product according to NVD.

Experimental risk indicator

Components are shown separately and deliberately not combined into a single number. Two of the six inputs below have no public source for any product on this site; a composite built without them would be a guess wearing a decimal point.

Known vulnerability count 8 bar scaled to 20
Highest published severity 9.8 CRITICAL
Confirmed exploitation no none listed in KEV
Exploitation probability EPSS 1.1% (highest)
Lifecycle status no source
Deployed exposure not measurable from public data

Published vulnerabilities

CVEPublishedCVSS SeverityEPSSFlags
CVE-2025-65297 2025-12-10 7.5 high 0.2%
CVE-2025-65296 2025-12-10 6.5 medium 0.3% Exploit ref
CVE-2025-65295 2025-12-10 8.1 high 0.2% Exploit ref
CVE-2025-65294 2025-12-10 9.8 critical 1.0% Exploit ref
CVE-2025-65293 2025-12-10 6.6 medium 1.1% Exploit ref
CVE-2025-65292 2025-12-10 7.3 high 0.8% Exploit ref
CVE-2025-65291 2025-12-10 7.4 high 0.2% Exploit ref
CVE-2025-65290 2025-12-10 7.4 high 0.2% Exploit ref

Affected versions

Version strings recorded by NVD against this product. These are the versions named in CPE match rules, not a complete firmware history — a version absent here has not been cleared, it has simply never been named in a CVE record.

4.1.9_0027

What this page does not tell you

There is no public dataset of end-of-support dates, default credentials or shipped network services for this product, so those fields are absent rather than estimated. Whether any of these vulnerabilities is exploitable in your deployment depends on firmware version, configuration and network position — none of which is knowable from here.

For the vendor's own advisories, see Aqara.

Vulnerability records from the National Vulnerability Database, matched to this product by CPE. Exploitation status from CISA KEV 2026.09.04. Exploitation probability from FIRST EPSS, 2026-09-04. Product name derived mechanically from the CPE identifier. See methodology.