---
id: CVE-2026-78845
title: >-
  Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light
  Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to
  Remote Code Execution (RCE) via UPnP root description parsing.
summary: >-
  Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light
  Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to
  Remote Code Execution (RCE) via UPnP root description parsing.
severity: none
published: '2026-10-27'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T14:17:16.840Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-78845'
references:
  - url: 'https://www.aidot.com/vulnerability-disclosure-policy'
  - url: 'https://github.com/0xee9f00/AiDot-SSDP-UPnP-Vulnerabilities'
tags:
  - cve.org
ingestedAt: '2026-10-27T16:11:59.454Z'
---

## Overview

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.