Xiaomi records
3 published records for vendor xiaomi.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-303 Incorrect Implementation of Authentication Algorithm1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2026-29515No exploit | MiCode FileExplorer SwiFTP Server Authentication Bypassxiaomi · fileexplorer · CWE-303 | Critical9.3 | — | 1.0% | Mar 11, 2026 |
35Monitor | CVE-2024-45346No exploit | GetApps application has code execution vulnerabilityxiaomi · getapps application · CWE-287 | High8.8 | — | 0.4% | Aug 28, 2024 |
25Monitor | CVE-2011-4697No exploit | The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote xiaomi · mitalk messenger · CWE-200 | Medium6.4 | — | 1.0% | Jan 25, 2012 |
- CVE-2026-2951537Monitor
MiCode FileExplorer SwiFTP Server Authentication Bypass
CriticalCVSS 9.3No exploitEPSS 1%xiaomi · fileexplorerMar 11, 2026
- CVE-2024-4534635Monitor
GetApps application has code execution vulnerability
HighCVSS 8.8No exploitEPSS 0%xiaomi · getapps applicationAug 28, 2024
- CVE-2011-469725Monitor
The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote
MediumCVSS 6.4No exploitEPSS 1%xiaomi · mitalk messengerJan 25, 2012