CVE-2026-107607
Awaiting Analysis Awaiting Analysis - Queue

Missing Authentication for Video Stream in SWIFI-SE2KIC Firmware

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: ICS-CERT

Description
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-14
AI Q&A
2026-10-14
EPSS Evaluated
N/A
NVD
CVE-2026-107607
EUVD
EUVD-2026-99224

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Swann Communications SWIFI-SE2KIC 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Missing Authentication for Critical Function issue in SWIFI-SE2KIC firmware versions 2.0.22 and prior. It allows an attacker on the local network to access real-time video streams without needing authentication.

Impact Analysis

An attacker could exploit this to view live video feeds from affected devices without permission, potentially compromising privacy or security in monitored areas.

Mitigation Strategies

Update SWIFI-SE2KIC firmware to version 2.0.23 or later to address the missing authentication vulnerability. Ensure the device is not exposed to untrusted networks and restrict access to trusted local networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107607. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart