CVE-2026-77974highCWE-306

CVE-2026-77974: fallo de gravedad alta en Softish C6 Ear Camera

Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

Publicada el

Seguir esta CVE+ Monitorear C6 Ear Camera+ Monitorear EarVision Android application

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.5epss 0.3%
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Softish · C6 Ear CameraSoftish · EarVision Android application
CVEs relacionadas — Softish C6 Ear Camera

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-81640HIGHSoftish C6 Ear Camera and EarVision Android Application Use of Hard-coded CredentialsEPSS 0.3%CVE-2026-82563HIGHSoftish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofingEPSS 0.2%CVE-2026-81330HIGHSoftish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive informationEPSS 0.1%