Skip to content
OpenAdvisories
High · 7.7 CVE-2026-50245 EUVD-2026-36309GHSA-p643-w432-6q35

Brickcom Cameras Missing Authentication for Critical Function

Published Jun 11, 2026 · Updated Jun 12, 2026 · Assigned by icscert

Description

Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is required to retrieve still images from the camera feed.

Affected products

VendorProductAffectedFixed
Brickcom Cube 3.2.3.5.6 —
Brickcom Dome 3.2.3.5.6 —
Brickcom Bullet 3.2.3.5.6 —
Brickcom Box 3.2.3.5.6 —

Advisories 1

References