CVE-2026-61514: Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

Q: What is the severity of CVE-2026-61514?

The severity of CVE-2026-61514 is rated as critical with a score of 9.3.

Q: How do I fix CVE-2026-61514?

To fix CVE-2026-61514, it is recommended to update the firmware of Puwell IP Cameras to the latest version that addresses the authentication bypass vulnerability.

Q: What type of vulnerability is CVE-2026-61514?

CVE-2026-61514 is an authentication bypass vulnerability that allows unauthorized access to device functions.

Q: What are the affected versions for CVE-2026-61514?

CVE-2026-61514 affects Puwell IP Camera firmware versions 2.x through 4.x.

Q: Can CVE-2026-61514 be exploited remotely?

Yes, CVE-2026-61514 can be exploited remotely as it allows unauthenticated access via TCP port 23456.

Published Aug 4, 2026

Updated

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field in the proprietary control protocol header to access live video streams, control pan and tilt motors, activate audio functions, and remotely restart the device.

Affected Software

1 affected component

Puwell IP Camera>=2.x<=4.x

Event History

Aug 4, 2026

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-61514?

The severity of CVE-2026-61514 is rated as critical with a score of 9.3.

How do I fix CVE-2026-61514?

To fix CVE-2026-61514, it is recommended to update the firmware of Puwell IP Cameras to the latest version that addresses the authentication bypass vulnerability.

What type of vulnerability is CVE-2026-61514?

CVE-2026-61514 is an authentication bypass vulnerability that allows unauthorized access to device functions.

What are the affected versions for CVE-2026-61514?

CVE-2026-61514 affects Puwell IP Camera firmware versions 2.x through 4.x.

Can CVE-2026-61514 be exploited remotely?

Yes, CVE-2026-61514 can be exploited remotely as it allows unauthenticated access via TCP port 23456.

CVE-2026-61514: Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-61514?

How do I fix CVE-2026-61514?

What type of vulnerability is CVE-2026-61514?

What are the affected versions for CVE-2026-61514?

Can CVE-2026-61514 be exploited remotely?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-61514?

How do I fix CVE-2026-61514?

What type of vulnerability is CVE-2026-61514?

What are the affected versions for CVE-2026-61514?

Can CVE-2026-61514 be exploited remotely?