What is GHSA-4fqm-96mj-r77p?

GHSA-4fqm-96mj-r77p is a security advisory published by GitHub Security Advisories with Medium severity. A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian...

Which CVE IDs does GHSA-4fqm-96mj-r77p cover?

GHSA-4fqm-96mj-r77p covers the following CVE IDs: CVE-2026-12527. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4fqm-96mj-r77pMedium

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian...

Vendor

GitHub Security Advisories

Published

June 18, 2026

Last Modified

June 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-12527 →

📋 Description

A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1_V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-time video stream data.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-12527
https://github.com/AounShAh/Research-on-v380-cctv-ip-camera#broken-access-control-leading-to-critical-live-video-exposure
https://github.com/advisories/GHSA-4fqm-96mj-r77p