Device Emulation Vulnerability in Camera Software by Vendor
CVE-2026-82563

8.4HIGH

Key Information:

Vendor

Softish

Status
Earvision Android Application
C6 Ear Camera
Vendor
CVE Published:
9 September 2026

What is CVE-2026-82563?

This vulnerability allows an attacker to impersonate the camera, positioning themselves in a man-in-the-middle scenario or emulating the device. This exploit enables the attacker to manipulate device status responses, observe application requests, and potentially trigger unauthorized firmware-update behaviors, thus compromising the integrity and confidentiality of the device's operation.

Affected Version(s)

C6 Ear Camera 1.3.1_Code 132

EarVision Android application 1.3.1

References

https://raw.githubusercontent.com/cisagov/CSAF/refs/heads...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthew Dubbrin from Vexel Foundation reported this vulnerability to CISA
.