CVE-2026-89174
HighCVSS 7.5Summary
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.
Risk Assessment
An attacker could take over accounts in the video intercom system, potentially leading to unauthorized access to premises or data.
Recommendation
Implement mechanisms to limit login attempts, such as account lockout after several failed attempts, and enforce strong passwords.
Other vulnerabilities in Smart Video Intercom System
See all- CVE-2026-89175Medium
The Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
- CVE-2026-89173Medium
The Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Original NVD description (English source)
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.