CVE-2026-12527 : 상세 정보

CVE-2026-12527

2026-06-18
14h17 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-10-26
11h10 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-306 Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

참고 자료