Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-84400

CareCam CM2507 Missing Authentication for Critical Function

CVSS 3.1 3.1 LOWCVSS 4.0 2.3 LOWCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-84400

Published

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of unauthorized administrative access.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-84400

Published

HMT.CM2507 Firmware

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "CareCam",
                    "product": "HMT.CM2507 Firmware",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "v251211.1507"
                        }
                    ],
                    "defaultStatus": "affected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON