What is CVE-2026-77974?

CVE-2026-77974 is a high-severity vulnerability in Softish C6 Ear Camera, classified under Missing Authentication for Critical Function. CVSS score: 8.0/10. Published 2026-09-09.

How severe is CVE-2026-77974?

High severity. CVSS v3 base score is 8.0 out of 10.

Auth bypass in Softish C6 Ear Camera

CVE-2026-77974

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Softish C6 Ear Camera — versions 1.3.1_Code 132
Softish Earvision Android Application — versions 1.3.1

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-77974?: CVE-2026-77974 is a high-severity vulnerability in Softish C6 Ear Camera, classified under Missing Authentication for Critical Function. CVSS score: 8.0/10. Published 2026-09-09.
How severe is CVE-2026-77974?: High severity. CVSS v3 base score is 8.0 out of 10.