Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-85083

CareCam Pro IP Cameras Use of Hard-coded Credentials

CVSS 3.1 6.8 MEDIUMCVSS 4.0 7.0 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-85083

Published

The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially resulting in complete device compromise.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85083

Published

ANJIA AJL33PC0801 Firmware

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "CareCam",
                    "product": "ANJIA AJL33PC0801 Firmware",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "linux_linux_202008261138_svn13796 / Bootloader U-Boot 2010.06 (compiled 2020-08-26)"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON