Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-37270: Trueview Security Camera Password Bypass Risk
CVE-2026-37270 · published 3 months ago
Summary
The Trueview Security Camera's password validation is faulty, allowing unauthorized access. This is particularly concerning because the camera's firmware contains hardcoded administrator credentials, making it easier for attackers to gain control. To minimize the risk, update the camera's firmware to the latest version.
Original advisory text
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware.
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Type
CWE-287Improper Authentication
CWE-798Use of Hard-coded Credentials
Timeline
Published7 Jul 2026
Updated30 Oct 2026
First seen7 Jul 2026
Track software like this
Free during beta