CVE-2026-81640: Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
Published Sep 9, 2026
·Updated
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update functionality.
Affected Software
2 affected components
Softish C6 Ear Camera
EarVision Android application
Event History
Sep 9, 2026
CVE Published
via MITRE·03:40 PM
Data Sourced
via MITRE·03:40 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an existing account or user interaction?
No existing privileges and no user interaction are required, as indicated by PR:N and UI:N. The attacker would need to derive the camera Wi-Fi password and connect to its wireless network.
2
What attacker position is required?
The attack vector is adjacent (AV:A), rather than requiring direct local access to the device. The attacker must be able to reach and join the camera's wireless network using the derived password.