Vendor
critical
advisory
Puwell IP Camera: Unauthenticated remote code execution via DebugShell (CVE-2026-61515)
1 rule 2 TTPs 1 CVEPuwell IP cameras (firmware 2.x - 4.x) contain an unauthenticated remote code execution vulnerability in a DebugShell interface on TCP port 34567, which is currently being targeted by botnets.
IP Camera
iot
rce
vulnerability
iot-botnet
1r
2t
1c
critical
advisory
Authentication Bypass in Puwell IP Camera Firmware
2 TTPs 2 CVEs 1 IOCPuwell IP Camera firmware versions 2.x through 4.x contain an authentication bypass vulnerability (CVE-2026-61514) allowing unauthenticated attackers to control device functions via TCP port 23456.
IP Camera +1
2t
2c
1i