https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:38:23.201486+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331904 EUVD-2026-331904 2026-10-07T02:38:23.257704+00:00 EUVD-2026-331904 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58453 fkie_cve-2026-58453 2026-10-07T02:38:23.257756+00:00

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate with these hardcoded credentials to access camera snapshots, video streams, network configuration, and factory-level API endpoints including the SetMAC command injection surface.

 https://cve.radiocsirt.org/vuln/ghsa-fg9v-4hw2-f9w8 GHSA-fg9v-4hw2-f9w8 2026-10-07T02:38:23.257795+00:00

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate with these hardcoded credentials to access camera snapshots, video streams, network configuration, and factory-level API endpoints including the SetMAC command injection surface.