Vulnerabilities

CVSS

7.7 High

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Risk score

61.6

Published

2026-06-11

Status

Deferred

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

Weaknesses

CWE-306

Coverage 1

vulnerability

Brickcom Cameras

This CISA advisory details a critical vulnerability in Brickcom cameras (Cube, Dome, Bullet, and Box models, version 3.2.3.5.6) that allows unauthenticated remote attackers to access live video feeds and retrieve sensiti…

CISA Advisories · Jun 11, 2026 Critical

CVE-2026-50245CVE-2026-50005default credentialsonvifremote access

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• brickcom.com/case/
• cisa.gov/news-events/ics-advisories/icsa-26-162-03