CVE-2026-52656

SJCAM AllWinner Tech products, specifically the SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before , are vulnerable to arbitrary code execution. The root cause is an unauthenticated HTTP endpoint exposed while the camera's access point is active, which accepts arbitrary file uploa...