Single Cryptographic Key Exposed 1.1 Million Baby Monitors Across 118 Countries

Researcher Sammy Azdoufal extracted one API key from Meari Technology's Android app, gaining remote access to 1.1 million baby monitors and security cameras sold globally under brands including Wyze, Zhiyun, and Petcube. The Chinese white-label manufacturer's weak password practices on its scheduled task platform created the vulnerability. Meari cut off access and closed the hole on March 10, 2026.