73 matches found
CVE-2026-79391
CVE-2026-79391 affects the MQTT service in Trueview 6.0.23.4 . The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations . No sp...
PT-2026-86252
No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...
PT-2026-86250
Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...
EUVD-2026-71741
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...
EUVD-2026-71740
No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...
CVE-2026-79389
Trueview T18161 S version 6.0.23.4 contains an improper verification flaw in its MQTT command processing . An attacker with network access can replay or modify captured MQTT messages—including security-related nonce , timestamp , and signature fields—and the device accepts the modified messages a...
PT-2026-86251
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...
CVE-2026-79390
Trueview TI8161 version 6.0.23.4 is susceptible to information disclosure because it transmits MQTT communications in plaintext over TCP port 1883 . An unauthenticated attacker on the same network segment can intercept this traffic to obtain device identifiers, message metadata, and control-relat...
EUVD-2026-71742
Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...
EUVD-2026-60550
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...
CVE-2026-51977
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...
CVE-2026-51977
Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera v1.0 exposes its RSA private key, enabling a physically proximate attacker to escalate privileges. CVSS 9.1 (critical) reflects high confidentiality and integrity impact. A proof-of-concept exists per CISA SSVC data. No patch version or reme...
CVE-2026-51977
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...
CVE-2026-51977
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...
PT-2026-76870
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...
Autodesk DWG TrueView 26.0.x < 26.0.118.0 (2027.1) (adsk-sa-2026-0009)
The version of Autodesk DWG TrueView installed on the remote host is prior to 26.0.118.0 2027.1. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2026-0009 advisory. - A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based...
CVE-2026-37270
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware...
CVE-2026-37270
The CVE-2026-37270 entry affects the Trueview Security camera T18161- AF with firmware v4.9.60.0. The vulnerability is an authentication bypass caused by improper password validation and hard-coded credentials present in the firmware. The CVSS metrics indicate a critical impact (CVSS 3.1: base sc...
CVE-2026-37270
Trueview Security camera T18161- AF v4.9.60.0 contains an authentication bypass vulnerability caused by improper password validation and the presence of hard-coded credentials in the firmware...