CVE-2026-89173
MediumCVSS 5.3Summary
The Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Risk Assessment
An attacker can determine valid account names, which facilitates password attacks and social engineering against system users.
Recommendation
Update the Smart Video Intercom software to a patched version and implement monitoring for account enumeration attempts.
Other vulnerabilities in Smart Video Intercom System
See all- CVE-2026-89175Medium
The Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
- CVE-2026-89174High
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.
Original NVD description (English source)
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.