CVE-2026-107607
MediumCVSS 6.2Summary
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
Risk Assessment
An unauthorized user on the local network could eavesdrop on the live video stream, causing a serious privacy and physical security breach.
Recommendation
Update SWIFI-SE2KIC firmware to a version later than 2.0.22 and isolate the devices in a dedicated, trusted subnet.
Other vulnerabilities in SWIFI-SE2KIC
See all- CVE-2026-107606Medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.
- CVE-2026-107605Medium
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Original NVD description (English source)
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS