CVE-2026-12527CWE-306

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware…

Medium · published June 18, 2026

CVSS v4.0
6.0
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/V:C/U:Red
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-06-18T13:55Z
EPSS history
Timeline
  • 18 JUN 13:55Z
    A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware…
    cvelistv5