What is CVE-2026-58453?

CVE-2026-58453 is a critical-severity vulnerability in Jaiotlink C492a-W6 Wi-Fi Ip Camera, classified under CWE-1392. CVSS score: 9.8/10. Published 2026-07-01.

How severe is CVE-2026-58453?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Jaiotlink C492a-W6 Wi-Fi Ip Camera

CVE-2026-58453

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded credentials vulnerability that allows network-adjacent attackers to gain unauthorized access by using the default admin username with an empty password accepted by the anyka_ipc HTTP service on port 80. Attackers can authenticate with these hardcoded credentials to access camera snapshots, video streams, network configuration, and factory-level API endpoints including the SetMAC command injection surface.

EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jaiotlink C492a-w6 Wi-fi Ip Camera — versions 4.8.30.57701411

Weakness classification (CWE)

CWE-1392

References

disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-58453?: CVE-2026-58453 is a critical-severity vulnerability in Jaiotlink C492a-W6 Wi-Fi Ip Camera, classified under CWE-1392. CVSS score: 9.8/10. Published 2026-07-01.
How severe is CVE-2026-58453?: Critical severity. CVSS v3 base score is 9.8 out of 10.