Wi-Fi Password Exposure Vulnerability in Smart Camera by Vendor X
CVE-2026-81640

8.7HIGH

Key Information:

Vendor

Softish

Status
Earvision Android Application
C6 Ear Camera
Vendor
CVE Published:
9 September 2026

What is CVE-2026-81640?

A newly discovered vulnerability in Smart Cameras manufactured by Vendor X allows an attacker to extract the device's Wi-Fi password. This could grant unauthorized access to the camera's wireless network, potentially exposing sensitive functionalities such as live video feeds, device services, and firmware updates. The vulnerability undermines the intended security measures, posing significant risks to user privacy and device integrity.

Affected Version(s)

C6 Ear Camera 1.3.1_Code 132

EarVision Android application 1.3.1

References

https://raw.githubusercontent.com/cisagov/CSAF/refs/heads...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthew Dubbrin from Vexel Foundation reported this vulnerability to CISA
.