CVE-2026-81330: falha de alta gravidade em Softish C6 Ear Camera
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.1%
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CVEs relacionadas — Softish C6 Ear Camera
No mesmo produto, das mais perigosas para as menos.
CVE-2026-81640HIGHSoftish C6 Ear Camera and EarVision Android Application Use of Hard-coded CredentialsEPSS 0.3%CVE-2026-77974HIGHSoftish C6 Ear Camera and EarVision Android Application Missing authentication for critical functionEPSS 0.3%CVE-2026-82563HIGHSoftish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofingEPSS 0.2%