CVE-2026-77974 — Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

CVE-2026-77974

Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function PUBLISHED

Description (CNA)

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.

Affected (CNA)

Vendor / product	Versions
Softish / EarVision Android application	affected 1.3.1
Softish / C6 Ear Camera	affected 1.3.1_Code 132

CWE

CWE-306

References

https://raw.githubusercontent.com/cisagov/CSAF/refs/heads/develop/csaf_files/VA/white/2026/va-26-251-01.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.