Get real-time updates on Telegram
P4
CVE-2026-58454: C492A-W6 Wi-Fi IP Camera 4.8.30.57701411
CVE-2026-58454. CVSS 3.1 base score 7.5 (HIGH, Vendor/CNA). EPSS 0.00834 (percentile 0.57315), scored 24-Oct-2026.
Affected technology
C492A-W6 Wi-Fi IP Camera · 4.8.30.57701411
JAIOTlink
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Authenticated attackers can execute arbitrary shell scripts by writing to the writable persistent JFFS2 storage path and triggering execution through the authenticated HTTP endpoint. Vendor/CNA’s CVSS 4.0 assessment (base score 7.7/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-94
- CCR priority
- 30.2 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · Vendor/CNA
- EPSS
- 0.00834 · percentile 0.57408 · 2026-10-25
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-25 19:52:47.952465+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-25 19:51:06.643138+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-58454.html