Low severity3.5NVD Advisory· Published Sep 18, 2026· Updated Sep 21, 2026
CVE-2026-85478
CVE-2026-85478
Description
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or modification of boot configuration, firmware data, and software loaded by the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
2- Cisagov CareCam CM2507: Four Vulnerabilities Disclosed Together, Ranging from Low to CriticalVypr Intelligence · Sep 18, 2026
- CareCam CM2507CISA ICS Advisories