CVE-2026-56718

Received Received - Intake

Path Traversal in AJCloud AJY IPC Firmware

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulnCheck

Description

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send crafted HTTP requests to port 80 without authentication to access sensitive files including cleartext RTSP credentials, Wi-Fi SSID and pre-shared key, device serial number, and cloud binding parameters.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-30

Last Modified

2026-08-30

Generated

2026-08-31

AI Q&A

2026-08-31

EPSS Evaluated

N/A

NVD

CVE-2026-56718

Affected Vendors & Products

Vendor	Product	Version / Range
ajcloud	ajy_ipc_firmware	to 01.10715.11.37 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal flaw in the AJCloud AJY IPC firmware before version 01.10715.11.37. It allows unauthenticated remote attackers to read arbitrary files with root privileges by sending crafted HTTP requests to port 80. The flaw enables access to sensitive files such as RTSP credentials, Wi-Fi details, device serial numbers, and cloud binding parameters.

Detection Guidance

To detect this vulnerability, scan for systems running the vulnerable AJCloud AJY IPC firmware on port 80. Use commands like 'nmap -p 80 --script http-vuln-cve2026-56718 <target>' or check for exposed web services with 'curl -v http://<target>/../../../../etc/passwd' to test for path traversal.

Impact Analysis

Attackers could exploit this to steal sensitive data like Wi-Fi credentials or device identifiers, gain unauthorized access to RTSP streams, or compromise device configurations. Since it requires no authentication, any exposed device is at immediate risk of exploitation.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection. Organizations using affected devices may face compliance breaches, legal penalties, and reputational damage due to potential data exposure.

Mitigation Strategies

Immediately update the AJCloud AJY IPC firmware to version 01.10715.11.37 or later. If an update is not available, restrict access to port 80 via firewall rules and disable the jdbhttpd web service if not required.

Hi! I’m here to help you understand CVE-2026-56718. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70