中文

// CVE · PUBLISHED 2026-08-04

CVE-2026-61514

Puwell Technology Inc. / IP Camera

9.3 · CVSS 4.0Critical

Description

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field in the proprietary control protocol header to access live video streams, control pan and tilt motors, activate audio functions, and remotely restart the device.

References

Related CVEs

  • CVE-2026-69110Microck / opencode-studioCVSS 9.3
  • CVE-2026-69098Cinnamon / kotaemonCVSS 9.3
  • CVE-2026-25289Qualcomm, Inc. / SnapdragonCVSS 9.6
  • CVE-2026-61515Puwell Technology Inc. / IP CameraCVSS 9.3
  • CVE-2026-60007Eclipse Foundation / Eclipse MiloCVSS 9.1
  • CVE-2026-15721Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.8
  • CVE-2026-14804Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.1
  • CVE-2026-14175Bilin Software and Informatics Consultancy Inc. / HUMANIST Digital Human ResourcesCVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.