CVE-2026-81330CWE-319

CVE-2026-81330

Medium · published September 9, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00094 · 0.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-09-09T20:17Z
References (1)
https://raw.githubusercontent.com/cisagov/CSAF/refs/heads/develop/csaf_files/VA/white/2026/va-26-251-01.json · [email protected]
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 09 SEP 15:33Z
    Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
    cvelistv5