CVE-2026-111281

Name of the Vulnerable Software and Affected Versions Jooan JA-A12 IP cameras version 009 20171107 Jooan JA-A12 IP cameras version 05.02.31.105

Description Unauthenticated attackers can achieve remote code execution and gain full device control by utilizing hard-coded credentials. The issue occurs when the jooandiag daemon executes commands through /bin/sh after receiving a specific request. This is triggered by sending singleCMD=SetDiagMode to the '/goform/SingleHandlebyCommand' endpoint along with an attacker-defined authserverip and authcode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.