What is GHSA-f9cf-88cq-rm9r?

GHSA-f9cf-88cq-rm9r is a security advisory published by GitHub Security Advisories with High severity. CareCam CM2507 IP cameras do not require authentication for access to its network video streaming...

Which CVE IDs does GHSA-f9cf-88cq-rm9r cover?

GHSA-f9cf-88cq-rm9r covers the following CVE IDs: CVE-2026-88259. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f9cf-88cq-rm9r?

GHSA-f9cf-88cq-rm9r has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-f9cf-88cq-rm9rHighCVSS 7.5

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-88259 →

📋 Description

CareCam CM2507 IP cameras do not require authentication for access to its network video streaming service. An unauthenticated attacker with network access to the affected device could retrieve live camera video.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-88259
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-08.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08
https://github.com/advisories/GHSA-f9cf-88cq-rm9r