CVE-2026-65893: Arbitrary Code Execution Vulnerability in CP PLUS EZ-P21 IP Camera

Published Jul 27, 2026

Updated

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware.

An attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with elevated privileges on the targeted device.

Affected Software

1 affected component

CP Plus EZ-P21 IP Camera

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade CP PLUS EZ-P21 IP Camera to a version that resolves this vulnerability.
Fixed in 4.8.16.1

Event History

Jul 27, 2026

CVE Published

via MITRE·07:12 AM

Data Sourced

via MITRE·07:12 AM

RemedyDescriptionWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the risk level of CVE-2026-65893?

The risk level of CVE-2026-65893 is classified as high with a severity score of 7.

How does CVE-2026-65893 impact CP PLUS EZ-P21 IP Camera?

CVE-2026-65893 allows arbitrary code execution on the CP PLUS EZ-P21 IP Camera due to an insecure debug feature in the firmware.

Who can exploit CVE-2026-65893?

An attacker with physical access to the device can exploit CVE-2026-65893.

What is the exploitation method for CVE-2026-65893?

The exploitation of CVE-2026-65893 involves placing arbitrary code on removable media and triggering its execution through the camera's debug mechanism.

What type of vulnerability is CVE-2026-65893?

CVE-2026-65893 is categorized as an arbitrary code execution vulnerability.