CVE-2018-16223: Qbeecam

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamera_preferences.xml in the QBee Cam application through 1.0.5 for Android allows an attacker to retrieve the username and password.

Affected products

• Qbeecam Qbeecam: up to and including 1.0.5

Published 2018-11-20. Last modified 2026-06-17.