CVE-2023-26323: Mi App Market

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code.

Affected products

• Mi App Market: from 4.57.4, before 4.58.2 (fixed in 4.58.2)

Published 2024-08-28. Last modified 2026-06-17.