CVE-2026-65894

The record

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to live video snapshots from the targeted device.

Affected packages

Related vulnerabilities

• CVE-2026-116238 In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins… CWE-307
• CVE-2026-111501 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of… CWE-307
• CVE-2026-22114 HTTP basic auth enforces no retry limit or backoff. CWE-307
• CVE-2026-107256 Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield… CWE-307
• CVE-2026-15586 Improper restriction of excessive authentication attempts vulnerability in İdvlabs… CWE-307
• CVE-2026-107145 The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the… CWE-307
• CVE-2026-116007 A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. CWE-307
• CVE-2026-65825 OpenReception's appointment booking software provides an end-to-end encrypted appointment… CWE-307