CVE-2025-63296

CVE-2025-63296 affects the KERUI K259 5MP Wi‑Fi / Tuya Smart Security Camera (firmware v33.53.87). The issue is a code execution vulnerability in the bootstrap/update path: during startup, /usr/sbin/anyka_service.sh scans mounted TF/SD cards; if /mnt/update.nor.sh is found, it copies it to /tmp/n...