Ez P21 Ip Camera CVE-2026-65894

Q: What is the CVSS score of CVE-2026-65894?

CVE-2026-65894 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-49117 HIGH

Improper Restriction of Excessive Authentication Attempts (CWE-307)

2026-07-27 CERT-In

GHSA-p2gf-522c-3969

Authentication Bypass Ez P21 Ip Camera Cp Plus

8.7

CVSS 4.0 · Vendor: CERT-In

Severity by source

Vendor (CERT-In) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (CERT-In) · only source for this CVE.

CVSS VectorVendor: CERT-In

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 08:21 vuln.today

CVE Published

Jul 27, 2026 - 07:16 cve.org

HIGH 8.7

DescriptionCVE.org

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to live video snapshots from the targeted device.

AnalysisAI

Unauthenticated attackers can gain access to live video snapshots from CP PLUS EZ-P21 IP Camera (v4.8.8.1 and prior) by brute‐forcing the HTTP authentication endpoint. The vulnerability stems from a missing brute‐force protection mechanism, allowing remote password guessing without rate limiting or account lockout. Successful exploitation reveals high‐confidentiality video data. No active exploitation or public exploit code is known at this time.