
[ZDI-26-399|CVE-2026-15683] (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability (CVSS 7.5; Credit: PHP Hooligans / Midnight Blue) https://www.zerodayinitiative.com/advisories/ZDI-26-399/
Post summary
The advisory announces a zero‑day vulnerability (CVE‑2026‑15683) in Lorex's indoor Wi‑Fi camera management server, describing improper certificate validation and its CVSS score, but does not provide PoC or exploitation details.
