Skip to content
OpenAdvisories
High ICSA-25-294-05 1 CVE

CloudEdge Online Cameras and App

Published Oct 21, 2025 · Updated Oct 21, 2025

Vendor: CloudEdge Product: App

Summary

Successful exploitation of this vulnerability could allow an attacker to gain access to live video feed and camera control.

Vulnerabilities 1

  • High 8.7
    CVE-2025-11757

    Improper Neutralization of Wildcards or Matching Symbols in CloudEdge Online Cameras and App

    The CloudEdge Cloud does not sanitize the MQTT topic input, which could allow an attacker to leverage the MQTT wildcard to receive all the messages that should be delivered to other users by subscribing to the a MQTT topic. In these messages, the attacker can…

    CloudEdge CloudEdge App

Revision history

  1. #1

    Initial Publication

References