Skip to content
OpenAdvisories
High ICSA-26-162-03 2 CVEs

Brickcom Cameras

Published Jun 11, 2026 · Updated Jun 11, 2026

Vendor: Brickcom Product: Box Product: Bullet Product: Cube Product: Dome

Summary

Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to gain unauthorized access to live video feeds, retrieve sensitive visual information from affected premises, and obtain administrative control of the device.

Vulnerabilities 2

  • High 7.7
    CVE-2026-50005

    Brickcom Cameras Use of Default Credentials

    Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.

    Brickcom Dome Box Cube
  • High 7.7
    CVE-2026-50245

    Brickcom Cameras Missing Authentication for Critical Function

    Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

    Brickcom Dome Box Cube

Revision history

  1. #1

    Initial Publication

References