EUVD-2026-102472

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111281

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-111281

The Jooan JA-A12 IP cameras, running firmware versions 009_20171107 and 05.02.31.105 , are vulnerable to an unauthenticated remote code execution (RCE) flaw. The root cause is the use of hard-coded credentials (CWE-798). An unauthenticated attacker can send a singleCMD=SetDiagMode request to the ...

PT-2026-115272

Name of the Vulnerable Software and Affected Versions Jooan JA-A12 IP cameras version 009 20171107 Jooan JA-A12 IP cameras version 05.02.31.105 Description Unauthenticated attackers can achieve remote code execution and gain full device control by utilizing hard-coded credentials. The issue occur...

CVE-2026-111281: Use of Hard-coded Credentials

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

Jooan JA-A12 Trust Management Vulnerability

The Jooan JA-A12 IP cameras versions 00920171107 and 05.02.31.105 have vulnerabilities related to trust management. These vulnerabilities stem from hardcoded credentials. Unverified attackers can execute arbitrary commands by sending the request “singleCMD=SetDiagMode” to...