CVE-2026-77974highCWE-306

CVE-2026-77974: high-severity vulnerability in Softish C6 Ear Camera

Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

Published

Follow this CVE+ Monitor C6 Ear Camera+ Monitor EarVision Android application

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 0.3%
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Softish · C6 Ear CameraSoftish · EarVision Android application
Related CVEs — Softish C6 Ear Camera

In the same product, most dangerous first.

CVE-2026-81640HIGHSoftish C6 Ear Camera and EarVision Android Application Use of Hard-coded CredentialsEPSS 0.3%CVE-2026-82563HIGHSoftish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofingEPSS 0.2%CVE-2026-81330HIGHSoftish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive informationEPSS 0.1%