Your $50 PoE Camera's Bootloader Has a Hard-Coded Password (CVE-2026-85083)
CISA advisory ICSA-26-251-01: CareCam Pro / ANJIA AJL33PC0801 cameras ship with a hard-coded credential that authenticates the U-Boot bootloader — physical access means full device compromise, and the vendor hasn't answered CISA's calls.
Moderate severity, 2 of 4. Known flaw, no confirmed in-the-wild exploitation. Fix it when you next touch the box.CVE-2026-85083
iotip-camerahard-coded-creds