VULNERABILITY INTELLIGENCE

CVE-2025-59452

CVSS score5.8 MEDIUM

EPSS probability0.44%

CISA KEVNot currently listed

Published2025-10-06

Last modified2026-10-09

Description

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.