TI-2026-56301 CVE-2026-81640 · GHSA-hpm8-v6q9-rjwv
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
Priority LOW 39
An attacker could derive the camera's Wi-Fi password and connect to its wireless network.
No Softish vulnerabilities are listed in CISA KEV.
4 records
An attacker could derive the camera's Wi-Fi password and connect to its wireless network.
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position.
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams.