Aircoookie vulnerabilities
We track 1 vulnerability in Aircoookie products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Aircoookie vulnerabilities
- 8.2 High severity
WLED: Missing Authorization
WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration (network, hardware, LED setup) to any u