Keyword

ip-camera

2 dispatches · latest 16 SEP 2026 · all keywords →

16 SEP 2026intel

CareCam CM2507: Seven CVEs, Live Video With No Login, And a Vendor Who Won't Pick Up

CISA advisory ICSA-26-258-08 covers seven CVEs in the CareCam CM2507 IP camera (firmware v251211.1507). Headlined by unauthenticated live video over the network — and no fix exists, because CareCam hasn't answered CISA's coordination attempts.

High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVE-2026-88259 +6

ics cameras ip-camera

15 SEP 2026intel

Your $50 PoE Camera's Bootloader Has a Hard-Coded Password (CVE-2026-85083)

CISA advisory ICSA-26-251-01: CareCam Pro / ANJIA AJL33PC0801 cameras ship with a hard-coded credential that authenticates the U-Boot bootloader — physical access means full device compromise, and the vendor hasn't answered CISA's calls.

Moderate severity, 2 of 4. Known flaw, no confirmed in-the-wild exploitation. Fix it when you next touch the box.CVE-2026-85083

iot ip-camera hard-coded-creds