[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-swann-camera-flaw-lets-anyone-on-your-network-watch-your-feed":10,"sections":46},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":35,"tags":36,"sources":41,"feedback":45,"feedback_at":22,"cost_usd":45,"total_tokens":45},11483,"swann-camera-flaw-lets-anyone-on-your-network-watch-your-feed","Swann Camera Flaw Lets Anyone on Your Network Watch Your Feed","Three authentication bugs in one Swann SWIFI-SE2KIC firmware let anyone on the local network view or stream footage with no login required.","A Swann security camera will stream its live video feed to anyone on your local network, no login required.\n\nCISA has disclosed three vulnerabilities in the Swann SWIFI-SE2KIC camera's firmware, version 2.0.22 and earlier, all stemming from the same root flaw, CWE-306, missing authentication for critical function. CVE-2026-107605 exposes the live video feed, CVE-2026-107606 leaks snapshot images, and CVE-2026-107607 opens the real-time stream, none of them requiring a password. CVSS scores land between 5.9 and 6.9, medium severity, because exploitation requires an attacker to already be on the local network. Researcher Elliott Phillips reported the bugs to CISA.\n\nThat local-network caveat sounds reassuring until you remember how porous home networks actually are: shared guest Wi-Fi, compromised routers, and smart-home devices that all trust each other by default. Missing-authentication bugs like this keep turning up in consumer IoT cameras, and they keep landing in the same place: a device that assumes anyone who can reach it is allowed to look through it.\n\nCISA's remediation list is really just advice to hide the problem: keep the camera behind a firewall, don't expose it to the internet, use strong router passwords. No firmware fix is mentioned. For a camera meant to watch your home, isolate it better isn't much of an answer.","[\"iot security\",\"cisa\",\"swann\",\"camera vulnerability\"]","2026-10-13T12:00:00.000Z","2026-10-13T16:33:44.752Z","2026-10-13T16:33:50.320Z","published",null,[24,30],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"publisher-r1","publisher",1,"The article states there are three vulnerabilities but only lists two severity scores (6.2 and 6.9), an internal inconsistency that needs resolution before publishing.","resolved",{"id":31,"reviewer":32,"round":33,"reason":34,"status":29},"editor-r2","editor",2,"The headline says 'Three Swann Security Cameras' but this is one camera model (SWIFI-SE2KIC) with three vulnerabilities — fix the headline so it doesn't imply three different camera products.","security",[37,38,39,40],"iot security","cisa","swann","camera vulnerability",[42],{"name":43,"url":44},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-286-02",0,{"sections":47},[48,53,57,62,67,72,77,82,87,92,97,102,107,112],{"name":49,"slug":50,"count":51,"latest_published_at":52},"AI","ai",6987,"2026-10-13T17:00:00.000Z",{"name":54,"slug":35,"count":55,"latest_published_at":56},"Security",969,"2026-10-13T17:18:25.000Z",{"name":58,"slug":59,"count":60,"latest_published_at":61},"Policy","policy",501,"2026-10-13T12:15:53.000Z",{"name":63,"slug":64,"count":65,"latest_published_at":66},"Deals","deals",499,"2026-10-13T16:17:17.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Hardware","hardware",249,"2026-10-13T17:03:44.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Consumer Tech","consumer-tech",210,"2026-10-13T17:26:43.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Science","science",199,"2026-10-13T12:01:37.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",126,"2026-10-13T16:34:25.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Software","software",119,"2026-10-13T17:01:31.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"Dev Tools","dev-tools",116,"2026-10-13T16:20:18.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"General","general",74,"2026-10-13T18:10:08.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"Gaming","gaming",64,"2026-10-13T15:59:07.000Z",{"name":108,"slug":109,"count":110,"latest_published_at":111},"Reviews","reviews",35,"2026-10-12T14:00:00.000Z",{"name":113,"slug":114,"count":115,"latest_published_at":116},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]