Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2026-50245

Brickcom Cameras Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Brickcom Cube

Default version status: unaffected

  • 3.2.3.5.6affected

Brickcom Dome

Default version status: unaffected

  • 3.2.3.5.6affected

Brickcom Bullet

Default version status: unaffected

  • 3.2.3.5.6affected

Brickcom Box

Default version status: unaffected

  • 3.2.3.5.6affected

References