CVE-2026-12527: Shenzhen Liandian Communication Technology Ltd v380 IP Camera / APPFHE1 v1.0.6.0

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

Affected products

Published 2026-06-18. Last modified 2026-06-22.