CVE-2026-79394

n/a / n/a PUBLISHED

Description (CNA)

An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio feeds in cleartext over unencrypted RTP/UDP.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/ShiroiBoushi/vulnerability-research/tree/main/CVE-2026-79394

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.