CVE-2026-52656

CriticalCVSS 9.8

Published: 20/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

In SJCAM AllWinner Tech products (SJ4000-Air V1.4C and earlier, and WhiteLabel versions), a vulnerability allows arbitrary code execution via a crafted FEX file.

Risk Assessment

An attacker can remotely execute arbitrary code on the device, potentially leading to full compromise and control of the camera.

Recommendation

Update the firmware to the latest version and restrict access to the device.

Original NVD description (English source)

An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execute arbitrary code via a crafted FEX file