CVE-2026-85478CWE-306

CVE-2026-85478

Low · published September 18, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or modification of boot configuration, firmware data, and software loaded by the device.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
2.4 · CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-09-18T21:17Z
References (2)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-08.json · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08 · [email protected]
EPSS history
Timeline
  • 20 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 18 SEP 16:16Z
    CareCam CM2507 Missing Authentication for Critical Function
    cvelistv5