High severity7.5NVD Advisory· Published Sep 18, 2026· Updated Sep 19, 2026
CVE-2026-84398
CVE-2026-84398
Description
CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user, media-profile, and stream configuration information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
2- Cisagov CareCam CM2507: Four Vulnerabilities Disclosed Together, Ranging from Low to CriticalVypr Intelligence · Sep 18, 2026
- CareCam CM2507CISA ICS Advisories