PT-2026-50675 · Shenzhen Liandian Communication Technology · V380 Ip Camera

Aounshah

·

CVE-2026-12527

·

Published

2026-06-18

·

Updated

2026-06-22

CVSS v4.0

6.0

Medium

VectorAV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/V:C/U:Red
Name of the Vulnerable Software and Affected Versions Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1 V1.0.6.020230803
Description A broken authorization boundary in the RTSP (Real Time Streaming Protocol, a network control protocol for delivering audio and video) media delivery pipeline allows unauthenticated network actors to bypass the credential-enforced live-view workflow and directly retrieve real-time video stream data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-12527

Affected Products

V380 Ip Camera