CVE-2026-50005: Brickcom Box

High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera feeds.

Affected products

• Brickcom Box: version 3.2.3.5.6 only
• Brickcom Bullet: version 3.2.3.5.6 only
• Brickcom Cube: version 3.2.3.5.6 only
• Brickcom Dome: version 3.2.3.5.6 only

Published 2026-06-11. Last modified 2026-06-17.