CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-58453 — JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a h...

·Source: NIST NVD

Updated:

Executive Summary

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate with these hardcoded credentials to access camera snapshots, video streams, netw

Analysis

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate with these hardcoded credentials to access camera snapshots, video streams, network configuration, and factory-level API endpoints including the SetMAC command injection surface. CVSS Score: 9.8. Published: 2026-07-01T17:16:40.517.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58453
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 1, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Lloyds joins Integral global FX liquidity network

Integral, a leading currency technology provider to financial markets, today announced that Lloyds has joined its ecosystem as a liquidity provider, further strengthening its institutional FX network.

Finextra
MEDIUMVulnerability

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue

CVE-2026-45659
The Hacker News
MEDIUMVulnerability

Quantum Breakthroughs Compress Post-Quantum Computing Timeline

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/quantum-breakthroughs-compress-post-quantum-computing-timeline-image_small-2-a-32137.jpg" align=right hspace=4><b>Microsoft, Google and AWS cite major gains in reliability and error correction.</b><br>Rapid advances in quantum hardware, AI-assisted error correction and fault-tolerant architectures from Microsoft, Google and Amazon

Bank Info Security