Vulnerability · Published Jul 27, 2026 · Assigned by CERT-In

CVE-2026-65894Improper Authentication Vulnerability in CP PLUS EZ-P21 IP Camera

High 8.7

In plain English

A high-severity security flaw in EZ-P21 IP Camera from CP-Plus. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.7%top 48.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to live video snapshots from the targeted device.

Affected products (as reported)

Vendor	Product	Versions
CP-Plus	EZ-P21 IP Camera	version v4.8.8.1 and prior

Weakness: CWE-307 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0380 third-party-advisory