CVE-2026-50245: Brickcom Cameras Missing Authentication for Critical Function

Synopsis

Missing authentication for a critical function affects Brickcom camera firmware (Cube, Dome, Bullet, and Box models at version 3.2.3.5.6). The /ONVIF endpoint is reachable without any credentials from a local process or shell on the host, requiring no authentication to retrieve live snapshot images. Successful exploitation allows an attacker to read live still images from the camera feed and, via the CVSS v4 subsequent system impact scores, to read, modify, or disrupt downstream systems that consume or relay the camera feed. HarborGuard tracks this advisory for patch availability and will make a patched-image rebuild available the moment an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no over-the-network access is required.

• AuthenticationNot required

  No credentials of any kind are required to access the /ONVIF endpoint and retrieve snapshot images.

• Victim interactionNot required

  No victim interaction is needed; the attacker can exploit the endpoint directly without any user action.

• Attack complexityDetail

  The exploit is reliable and condition-free, with no race conditions or environmental factors required.

Blast Radius

• Reads live still images from the camera feed without any authorization, exposing whatever the camera is pointed at.
• Reads data from subsequent systems that consume or relay the camera feed, such as recording servers or monitoring dashboards.
• Modifies data in subsequent systems connected to the camera pipeline, such as altering stored footage metadata or feed routing configuration.