CVE-2026-77974highCWE-306

CVE-2026-77974: falha de alta gravidade em Softish C6 Ear Camera

Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

Publicada em

Seguir esta CVE+ Monitorar C6 Ear Camera+ Monitorar EarVision Android application

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.3%
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Softish · C6 Ear CameraSoftish · EarVision Android application
CVEs relacionadas — Softish C6 Ear Camera

No mesmo produto, das mais perigosas para as menos.

CVE-2026-81640HIGHSoftish C6 Ear Camera and EarVision Android Application Use of Hard-coded CredentialsEPSS 0.3%CVE-2026-82563HIGHSoftish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofingEPSS 0.2%CVE-2026-81330HIGHSoftish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive informationEPSS 0.1%