CVE-2026-12527 — Shenzhen Liandian Communication Technology LTD / V380 IP Camera / AppFHE1_V1.0.6.0

CVE-2026-12527

Shenzhen Liandian Communication Technology LTD / V380 IP Camera / AppFHE1_V1.0.6.0 PUBLISHED

Description (CNA)

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

Affected (CNA)

Vendor / product	Versions
Shenzhen Liandian Communication Technology LTD / V380 IP Camera / AppFHE1_V1.0.6.0	affected AppFHE1_V1.0.6.020230803

CWE

CWE-306

References

https://github.com/AounShAh/Research-on-v380-cctv-ip-camera#broken-access-control-leading-to-critical-live-video-exposure

ADP enrichment

CISA-ADP

No English description supplied.

https://github.com/AounShAh/Research-on-v380-cctv-ip-camera#broken-access-control-leading-to-critical-live-video-exposure