Known Vulnerabilities for R2c Application Firmware by Foscam
Listed below are 1 of the newest known vulnerabilities associated with "R2c Application Firmware" by "Foscam".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114356 json | Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-114354 json | Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firm... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-96587 json | The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credent... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-94204 json | The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unr... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-89034 json | TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy ... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-85628 json | Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and V... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-82585 json | The Botslab G980H dash camera firmware transmits sensitive information over unencrypted HTTP and RTSP connections. An attacke... | Not Provided | 2026-09-24 | 2026-09-25 |
| CVE-2026-82563 json | An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permi... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-80706 json | In the Linux kernel, the following vulnerability has been resolved: can: softing: fw_parse(): validate firmware record spans... | Not Provided | 2026-08-28 | 2026-10-16 |
| CVE-2026-78321 json | The HTTP media server on DJI drones does not enforce sufficient limits on incoming connections or request rates. An attacker ... | Not Provided | 2026-08-24 | 2026-08-24 |