CyberSecBulletin

Puwell Technology vulnerabilities

We track 2 vulnerabilities in Puwell Technology products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 4, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Puwell Technology vulnerabilities

  • 9.8 Critical severity

    IP Camera: Hidden Functionality

    CVE-2026-61515Puwell TechnologyEPSS 2.44%

    Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on

  • 9.8 Critical severity

    IP Camera: Missing Authentication for Critical Functionality

    CVE-2026-61514Puwell Technology

    Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can ex