CVE-2026-84400 — CareCam CM2507 Missing Authentication for Critical Function
CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network w…
Published: 2026-09-18 · CVSS: 2.3 · CVSS 4.0
CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of unauthorized administrative access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7