Vulnerability Description
CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-25
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08
FAQ
What is CVE-2026-88259?
CVE-2026-88259 is a vulnerability with a CVSS score of 7.5 (HIGH). CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live ca...
How severe is CVE-2026-88259?
CVE-2026-88259 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-88259?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.