Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-12527

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unaut

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Toreon

Description

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shenzhen Liandian Communication Technology LTD V380 IP Camera / AppFHE1_V1.0.6.0

Default version status: unknown

  • AppFHE1_V1.0.6.020230803affected

References