CVE-2026-15683— Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Lorex | 2K Indoor Wi-Fi Security Camera | 2.800.020000000.3.R.20220331 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15683
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to exploit this vulnerability. The specific flaw exists within the device management functionality. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-26851.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
证书验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
LOREX 2K Indoor Wi-Fi Security Camera 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
LOREX 2K Indoor Wi-Fi Security Camera是LOREX公司的一款安防监控产品 LOREX 2K Indoor Wi-Fi Security Camera 2.800.020000000.3.R.20220331版本存在加密问题漏洞，该漏洞源于服务器证书验证不当，可能导致网络相邻攻击者在无需用户交互的情况下执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lorex | 2K Indoor Wi-Fi Security Camera | 2.800.020000000.3.R.20220331 | - |
II. Public POCs for CVE-2026-15683
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15683
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-15683 (1)
IV. Related Vulnerabilities
Same product: 2K Indoor Wi-Fi Security Camera
- CVE-2026-15680
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format - CVE-2024-52548
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass - CVE-2024-52547
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflo - CVE-2024-52546
Lorex 2K Indoor Wi-Fi Security Camera - Null pointer derefer - CVE-2024-52545
Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap r
Same vendor: Lorex
- CVE-2026-15680
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format - CVE-2024-52548
Lorex 2K Indoor Wi-Fi Security Camera - Code signing bypass - CVE-2024-52547
Lorex 2K Indoor Wi-Fi Security Camera - Stack buffer overflo - CVE-2024-52546
Lorex 2K Indoor Wi-Fi Security Camera - Null pointer derefer - CVE-2024-52545
Lorex 2K Indoor Wi-Fi Security Camera - Out of bounds heap r
Same weakness: CWE-295
- CVE-2026-50302
Windows Cryptographic Services Security Feature Bypass Vulne - CVE-2026-47632
Azure Monitor Agent Metrics Extension Elevation of Privilege - CVE-2026-55001
Active Directory Domain Services Elevation of Privilege Vuln - CVE-2026-59836
FortiClientEMS证书验证缺陷致信息泄露 - CVE-2026-22093
Adversary-in-the-Middle (AitM) attack vulnerability in EVbe
V. Comments for CVE-2026-15683
No comments yet