Description
The Ubia camera ecosystem fails to adequately secure API credentials,
potentially enabling an attacker to connect to backend services. The
attacker would then be able to gain unauthorized access to available
cameras, enabling the viewing of live feeds or modification of settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubia | Ubox Android | < January 15, 2026 | January 15, 2026 |
| Ubia | Ubox IOS | < January 15, 2026 | January 15, 2026 |
Advisories 1
- ICSA-25-310-02 Ubia Ubox (Update A) CISA ICS & IT advisories · Feb 3, 2026