Keyword

no-fix

2 dispatches · latest 16 SEP 2026 · all keywords →

16 SEP 2026intel

CareCam CM2507: Seven CVEs, Live Video With No Login, And a Vendor Who Won't Pick Up

CISA advisory ICSA-26-258-08 covers seven CVEs in the CareCam CM2507 IP camera (firmware v251211.1507). Headlined by unauthenticated live video over the network — and no fix exists, because CareCam hasn't answered CISA's coordination attempts.

High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVE-2026-88259 +6

ics cameras ip-camera

01 SEP 2026exploits

Your MikroTik Router Is a Brute-Force Target, and There's No Patch — Yet

CVE-2026-16347 (CVSS 8.8) hits every version of RouterOS: the API auth path has no real rate-limiting, lockout, or source restriction, so admin credentials can be hammered at high volume. CISA published ICSA-26-209-05 with a mitigation checklist that is the whole post.

High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVE-2026-16347

mikrotik routeros brute-force