CVE-2026-82563: Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of the Softish C6 Ear Camera with the Softish EarVision Android application are exposed when the application communicates with the camera. The attack can place an adversary between the application and device or allow them to emulate the device.
What does an attacker need to exploit it?
The attacker does not need privileges, but user interaction is required. Exploitation requires the ability to impersonate the camera and occupy a man-in-the-middle or device-emulation position.
What could an attacker do after successful spoofing?
An attacker could manipulate device-status responses, observe application requests, and potentially trigger firmware-update behavior.