Skip to content
OpenAdvisories

Vendor

Naxclow

7 known vulnerabilities.

Products

Smart Doorbell X3 7 X Smart Home 7 V720 7 ix cam 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-50099

    Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file or directory

    During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and negotiated WPA keys in cleartext to an exposed UART console on production hardware. The UART pads are labeled, run with default serial settings, and drop to an interacti…

    Naxclow ix cam Smart Doorbell X3 V720
  • Medium 5.3
    CVE-2026-50244

    Naxclow IoT Platform Missing Authorization

    The Naxclow platform exposes a registration endpoint that accepts signed requests containing a batch prefix and an arbitrary caller-supplied account identifier, without validating any ownership relationship. Each call mints a new sequential device identifier …

    Naxclow X Smart Home ix cam Smart Doorbell X3
  • Medium 5.3
    CVE-2026-42932

    Naxclow IoT Platform Generation of Predictable Numbers or Identifiers

    Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform also exposes an endpoint that reveals the current identifier high-water mark, th…

    Naxclow X Smart Home ix cam Smart Doorbell X3