VULNERABILITY INTELLIGENCE
CVE-2026-12527
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-06-18
Last modified2026-10-26
Description
A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.
Weakness classification
- 1c6b5737-9389-4011-8117-89fa251edfb2: CWE-306