TI-2026-78889 CVE-2026-53986 · GHSA-vwwq-ggwp-4879
Hardcoded credentials in Girafit camera app expose TURN username
Priority HIGH 70
Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded credentials vulnerability that allows attackers to obtain the shared TURN relay username by decompiling the…