CVE-2026-61515

Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on TCP port 34567. Attackers can exploit...

PT-2026-67720

Name of the Vulnerable Software and Affected Versions Puwell IP Camera versions 2.x through 4.x Description An unauthenticated command injection issue exists in the binary protocol service. Remote attackers can execute arbitrary operating system commands with root-level privileges by sending a...