CYBERSIXT Signal Over Noise
securityonline.info 6/24/2026, 3:41:09 AM · external

Flaw in AVer PTC500S cameras allows remote code execution

Flaw in AVer PTC500S cameras allows remote code execution
Developing story incident 11 articles tracked
Lantronix, UniFi flaws surface as Outlook Mac reply glitch seen
CyberSIXT Evidence Panel
Primary Source cisa.gov
CVE Intel
CVE-2025-67038 - NVD CISA KEV due 2026-06-26 9.8 CRITICAL Patch Unknown
CVE-2026-34910 - NVD CISA KEV due 2026-06-26 10 CRITICAL Patch Unknown
CVE-2026-34909 - NVD CISA KEV due 2026-06-26 10 CRITICAL Patch Unknown
CVE-2026-34908 - NVD CISA KEV due 2026-06-26 10 CRITICAL Patch Unknown
CVE-2026-40624 - NVD Not in KEV 9.8 CRITICAL Patch Unknown
CISA KEV Listed in KEV
Patch Patch Status Unknown

TODAY'S critical alerts include four active exploits related to vulnerabilities: CVE-2025-67038 (Lantronix EDS5000), CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908 (all Ubiquiti UniFi OS vulnerabilities). Notably, CVE-2026-40624 affects AVer PTC500S cameras, scoring a CVSS of 9.8, indicating a critical risk due to improper input validation that could lead to remote code execution. CISA has highlighted this flaw as serious due to its potential impact on government and healthcare networks. A firmware update is available, with recommended actions for users to isolate devices and monitor logs.

View Primary Source Via securityonline.info

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline