CVE-2026-107606
MediumCVSS 6.2Summary
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.
Risk Assessment
An unauthorized user on the local network could obtain snapshots of the camera feed, potentially leading to leakage of sensitive visual information.
Recommendation
Update SWIFI-SE2KIC firmware to a version later than 2.0.22 and restrict network access to the device to trusted hosts only.
Other vulnerabilities in SWIFI-SE2KIC
See all- CVE-2026-107607Medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
- CVE-2026-107605Medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Original NVD description (English source)
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS