Vendor

    Xiaomi

    29 known vulnerabilities in products by Xiaomi, 0 of them actively exploited (CISA KEV).

    Key figures

    29

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Xiaomi
    HighCVE-2023-26315

    Xiaomi router has a command injection vulnerability after authorization

    also in 1 other product

    		6.5
    CriticalCVE-2020-14094

    Xiaomi router R3600: Remote Code Execution

    also in 1 other product

    		9.8
    CriticalCVE-2020-14095

    Xiaomi router R3600: Remote Code Execution

    also in 1 other product

    		9.8
    CriticalCVE-2024-4406

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

    also in 1 other product

    		8.8
    HighCVE-2019-6743

    Xiaomi Browser: Out-of-bounds Write

    also in 1 other product

    		7.8
    HighCVE-2019-13322

    Xiaomi Browser: Product UI does not Warn User of Unsafe Actions

    also in 1 other product

    		7.5
    CriticalCVE-2024-4405

    Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability

    also in 1 other product

    		8.8
    CriticalCVE-2026-29515

    MiCode FileExplorer SwiFTP Server Authentication Bypass

    also in 1 other product

    		9.8
    HighCVE-2023-26320

    Xiaomi Router external request interface vulnerability leads to stack overflow

    also in 1 other product

    		7.5
    CriticalCVE-2023-26322

    GetApps application has code execution vulnerability

    also in 1 other product

    		8.8
    CriticalCVE-2023-26317

    Xiaomi router external request interface has command injection

    also in 1 other product

    		7.0
    CriticalCVE-2023-26324

    GetApps application has code execution vulnerability

    also in 1 other product

    		8.8
    HighCVE-2023-26319

    Xiaomi Router administration interface vulnerability leads command injection and stack overflow

    also in 1 other product

    		6.7
    HighCVE-2019-13321

    Xiaomi Browser: Incorrect Permission Assignment for Critical Resource

    also in 1 other product

    		5.5
    HighCVE-2024-45348

    Xiaomi Router AX9000 has a post-authorization command injection vulnerability

    also in 1 other product

    		6.4
    HighCVE-2024-45346

    GetApps application has code execution vulnerability

    		8.8
    CriticalCVE-2023-26323

    Xiaomi App Market has a code execution vulnerability

    also in 1 other product

    		7.6
    CriticalCVE-2024-45347

    Mi Connect Service APP protocol flaws lead to unauthorized access

    		9.6
    MediumCVE-2026-127209

    Xiaomi Mi Browser < 14.66.0 Path Traversal via ThirdDocViewerActivity

    		4.0
    HighCVE-2023-26318

    Xiaomi router web interface post-authorization stack overflow

    also in 1 other product

    		6.7
    HighCVE-2024-45352

    Xiaomi smarthome application Webview has code execution vulnerability

    		8.8
    CriticalCVE-2023-26321

    The international version of Xiaomi File Manager has a path traversal vulnerability

    also in 1 other product

    		6.3
    HighCVE-2024-45351

    Game center application has code execution Vulnerability

    		7.8
    HighCVE-2024-45356

    Xiaomi phone framework has unauthorized access vulnerability

    		7.3
    MediumCVE-2024-45361

    Mi Connect Service APP protocol flaws lead to leaking sensitive user information

    		6.5

    All vulnerabilities in search

    Products

    Products by Xiaomi
    Xiaomi Router40
    Getapps Application30
    Xiaomi Browser30