Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-77974

Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softish EarVision Android application

Default version status: unaffected

  • 1.3.1affected

Softish C6 Ear Camera

Default version status: unaffected

  • 1.3.1_Code 132affected

References