Client-Side Authentication Flaw in Smart Video Intercom System from Kingdom Communication Associated
CVE-2026-89175

6.9MEDIUM

Key Information:

Vendor: Kingdom Communication Associated
Status: Eh3040; Eh4200; Eh1000b; Eh2070
Vendor: CVE Published:; 11 September 2026

🔔 Create Kingdom Communication Associated Vulnerability Alert

What is CVE-2026-89175?

The Smart Video Intercom System developed by Kingdom Communication Associated contains a client-side authentication vulnerability that allows unauthenticated remote attackers to circumvent authentication measures. This flaw enables unauthorized users to access specific pages of the system, potentially exposing sensitive partial configuration values. Ensuring robust access controls and timely updates is essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

EH1000B 0 < 2.7.0A

EH2070 0 < 2.8.0A

EH3040 0 < 2.5.0A

References

https://www.twcert.org.tw/tw/cp-132-11198-b8bba-1.html

third-party-advisory

https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html

third-party-advisory

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 11, 2026
Vulnerability Reserved
Sep 11, 2026

CVE-2026-89175 Data

JSON