Xiaomi Technology vulnerabilities
We track 1 vulnerability in Xiaomi Technology products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Xiaomi Technology vulnerabilities
- 7.4 High severity
Galaxy FDS Android SDK: Improper Validation of Certificate with Host Mismatch
Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled (the default configuration). In GalaxyFDSClientImpl.createHttpClient(), the SDK configures Apache HttpClient with SSLSocketFa