ZeroDay Findings
Sign inSign up

Findings

CVE-2026-107606

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to

Published Oct 13, 2026 · updated Oct 14, 2026 · CISA

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · NIST NVD

    Detected

    SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.

  2. Oct 14, 2026 · NIST NVD

    Updated

    SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.

Sources

  • CISA Cybersecurity AdvisoriesGovernment advisoryCVE-2026-107606

    View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware

    cisa.gov
  • CISA ICS AdvisoriesGovernment advisoryCVE-2026-107606

    View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware

    cisa.gov
  • CVE.orgVulnerability recordCVE-2026-107606

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-107606

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2026-107606

    SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication.

    nvd.nist.gov

References