Authentication Bypass in Trueview T18161-AF Firmware

Publication date: 2026-07-07

Last updated on: 2026-07-09

Assigner: MITRE

Description

Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-07

Last Modified

2026-07-09

Generated

2026-07-28

AI Q&A

2026-07-08

EPSS Evaluated

2026-07-26

NVD

CVE-2026-37270

EUVD

EUVD-2026-42154

Affected Vendors & Products

Vendor	Product	Version / Range
trueview	security_camera_t18161_af	4.9.60.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

The vulnerability in the Trueview Security camera T18161-AF version 4.9.60.0 is an authentication bypass issue. It occurs because the device's firmware improperly validates passwords and contains hard-coded credentials, which can be exploited to bypass normal authentication mechanisms.

Impact Analysis

This vulnerability can allow unauthorized users to gain access to the security camera without proper authentication. This could lead to unauthorized viewing or control of the camera, potentially compromising security and privacy.

Hi! I’m here to help you understand CVE-2026-37270. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70