Medium severity6.8NVD Advisory· Published Sep 18, 2026· Updated Sep 19, 2026
CVE-2026-81305
CVE-2026-81305
Description
CM2507 IP cameras automatically execute a predetermined script from removable media without verifying its authenticity or integrity. An attacker with physical access to the device could supply a malicious script and execute arbitrary code in the security context of the affected device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
2- Cisagov CareCam CM2507: Four Vulnerabilities Disclosed Together, Ranging from Low to CriticalVypr Intelligence · Sep 18, 2026
- CareCam CM2507CISA ICS Advisories