Keep the camera behind a secured router and firewall. Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Ensure the router and associated accounts use strong, unique passwords. Keep device firmware updated when new releases become available.
Quick answers
What is CVE-2026-107606?
Keep the camera behind a secured router and firewall. Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Ensure the router and associated accounts use strong, unique passwords. Keep device firmware updated when new releases become available.
How severe is CVE-2026-107606?
medium, CVSS 6.9
Is CVE-2026-107606 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-107606 be mitigated?
Keep the camera behind a secured router and firewall. Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Ensure the router and associated accounts use strong, unique passwords. Keep device firmware updated when new releases become available.
CVSS
6.9
Vendor
Swann Communications
Published
Oct 14, 2026 · 03:23
Patch
Unknown / not confirmed
Affected products
SWIFI-SE2KIC firmware
Mitigation
Keep the camera behind a secured router and firewall. Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Ensure the router and associated accounts use strong, unique passwords. Keep device firmware updated when new releases become available.
CISA and Swann Communications have disclosed three Missing Authentication for Critical Function vulnerabilities affecting Swann Communications SWIFI-SE2KIC security camera firmware. The flaws, tracked as CVE-2026-107605, CVE-2026-107606, and CVE-2026-107607, allow attackers on the local network to view live video feeds, retrieve snapshots, and access real-time video streams without authentication. The vulnerabilities affect all SWIFI-SE2KIC firmware versions up to and including 2.0.22. CVSS scores range from 3.1 to 6.9, classifying them as Medium severity. No official patch has been released as of the advisory date, and no active exploitation has been reported.