Medium severity · published Sep 9, 2026
CVE-2026-81330
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
6.5
CVSS
0.1%
EPSS
No
On KEV
Description
The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless range may capture and reconstruct the live video stream without transport encryption.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
C6 Ear Camera · Softish
1.3.1_Code 132 · source: vendor
EA
EarVision Android application · Softish
1.3.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-81330
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-81330
raw.githubusercontent.com
https://raw.githubusercontent.com/cisagov/CSAF/refs/heads/develop/csaf_files/VA/white/2026/va-26-251-01.json
More from C6 Ear Camera
8.8
CVE-2026-81640
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
8.0
CVE-2026-77974
Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function
7.6
CVE-2026-82563
Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing