CVE-2026-50245

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-06-11

Last updated on: 2026-06-17

Assigner: ICS-CERT

Description

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-11

Last Modified

2026-06-17

Generated

2026-10-10

AI Q&A

2026-06-12

EPSS Evaluated

2026-10-09

NVD

CVE-2026-50245

Affected Vendors & Products

Vendor	Product	Version / Range
Brickcom	Cube	3.2.3.5.6
Brickcom	Dome	3.2.3.5.6
Brickcom	Bullet	3.2.3.5.6
Brickcom	Box	3.2.3.5.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability affects Brickcom cameras by allowing unauthenticated users to access live snapshot images through the /ONVIF endpoint.

No authentication is required to retrieve still images from the camera feed, which means anyone can view these images without permission.

Impact Analysis

The vulnerability can lead to unauthorized access to live images from the affected cameras.

This could result in privacy violations, exposure of sensitive or confidential information, and potential security risks if the camera feed is used for surveillance.

Compliance Impact

This vulnerability allows unauthenticated access to live snapshot images from Brickcom cameras, which could lead to unauthorized disclosure of sensitive visual data.

Such unauthorized access may result in violations of data protection regulations like GDPR and HIPAA, which require strict controls over access to personal and sensitive information.

Therefore, organizations using affected Brickcom cameras might face compliance risks due to potential exposure of protected data through this vulnerability.

Hi! I’m here to help you understand CVE-2026-50245. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70