Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send crafted HTTP requests to port 80 without authentication to access sensitive files including cleartext RTSP credentials, Wi-Fi SSID and pre-shared key, device serial number, and cloud binding parameters.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-01 | 1 | Disclosure1 |
| 2026-09-04 | 1 | General1 |
https://hellkid.dev/writeups/cve-2026-56718/
Post summary
The text presents only a link to a writeup for CVE-2026-56718, without any explicit details or claims about exploitation, patches, or technical specifics.
CVE-2026-56718 AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attack… https://www.cve.org/CVERecord?id=CVE-2026-56718
Post summary
The text announces CVE-2026-56718, highlighting a path traversal flaw in AJCloud IPC firmware that allows unauthenticated remote attacks.