Critical Authentication Bypass in Swann Security Cameras Exposes Video Surveillance
Three critical authentication bypass vulnerabilities (CVE-2026-107605, CVE-2026-107606, CVE-2026-107607) were discovered in Swann Communications SWIFI-SE2KIC security cameras running firmware version 2.0.22 and earlier. These Missing Authentication for Critical Function flaws allow attackers on the local network to access live video feeds, capture snapshots, and stream real-time video without any authentication credentials. The vulnerabilities affect security cameras deployed worldwide in commercial facilities, creating significant privacy and surveillance risks for organizations relying on these devices for physical security monitoring. This incident highlights the growing security risks in IoT surveillance infrastructure as organizations increasingly deploy connected cameras without proper network segmentation. With the rise of insider threats and lateral movement attacks targeting unsecured IoT devices, these authentication bypass vulnerabilities represent a critical gap in physical security systems that adversaries can exploit to gain unauthorized surveillance access.
Kill Chain
