PT-2026-50675 · Shenzhen Liandian Communication Technology · V380 Ip Camera / Appfhe1 V1.0.6.0

Publicado 2026-06-18 · Atualizado 2026-06-18 · CVE-2026-12527

Mitre

CVSS v4.0

6.0

Média

Vetor base

AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/V:C/U:Red

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1 V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2026-12527

Produtos afetados

V380 Ip Camera / Appfhe1 V1.0.6.0

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-12527 · Nota de Segurança
• https://github.com/AounShAh/Research-on-v380-cctv-ip-camera#broken-access-control-leading-to-critical-live-video-exposure · Nota