THREAT OPS › Threat News › CareCam CM2507
CareCam CM2507
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-08.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to access live video and sensitive device information, enable unauthorized services, execute arbitrary code, modify device operation, and recover stored credenti
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2026-88259cve
- CVE-2026-84398cve
- CVE-2026-84400cve
- CVE-2026-81305cve
- CVE-2026-85478cve
- CVE-2026-85497cve
- CVE-2026-81321cve
- https://www.cve.org/CVERecord?id=CVE-2026-88259url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nurl
- https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nurl
- https://www.cve.org/CVERecord?id=CVE-2026-84398url
- https://www.cve.org/CVERecord?id=CVE-2026-84400url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:Nurl
- https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:Nurl
- https://www.cve.org/CVERecord?id=CVE-2026-81305url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hurl
- https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nurl
- https://www.cve.org/CVERecord?id=CVE-2026-85478url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nurl
- https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:Nurl
- https://www.cve.org/CVERecord?id=CVE-2026-85497url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hurl
- https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nurl
- https://www.cve.org/CVERecord?id=CVE-2026-81321url
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08
Same event, other sources
- CareCam CM2507cisa_advisories · 2026-09-15