Skip to content
OpenAdvisories
Medium ICSA-25-310-02 1 CVE

Ubia Ubox (Update A)

Published Nov 6, 2025 · Updated Feb 3, 2026 · Revision 2

Vendor: Ubia Product: Ubox Android Product: Ubox IOS

Summary

Successful exploitation of this vulnerability could allow an attacker to remotely view camera feeds or modify settings.

Vulnerabilities 1

  • Medium 6.5
    CVE-2025-12636

    Ubia Ubox

    The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modi…

    Ubia Ubox IOS Ubox Android Android iOS

Revision history

  1. #2

    Update A - Update to affected products and mitigations.

  2. #1

    Initial Publication

References