What is CVE-2026-84400?

CVE-2026-84400 is a low-severity vulnerability in Carecam Hmt.cm2507 Firmware, classified under Missing Authentication for Critical Function. CVSS score: 3.1/10. Published 2026-09-18.

How severe is CVE-2026-84400?

Low severity. CVSS v3 base score is 3.1 out of 10.

Auth bypass in Carecam Hmt.cm2507 Firmware

CVE-2026-84400

CareCam CM2507 IP cameras contain an insufficiently protected network maintenance mechanism that can activate a remote debugging service. An attacker on the same local network who satisfies certain device state conditions could make the service remotely accessible, increasing the risk of unauthorized administrative access.

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Carecam Hmt.cm2507 Firmware — versions v251211.1507

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

Frequently asked questions

What is CVE-2026-84400?: CVE-2026-84400 is a low-severity vulnerability in Carecam Hmt.cm2507 Firmware, classified under Missing Authentication for Critical Function. CVSS score: 3.1/10. Published 2026-09-18.
How severe is CVE-2026-84400?: Low severity. CVSS v3 base score is 3.1 out of 10.