Softish vulnerabilities
We track 3 vulnerabilities in Softish products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2026.
Latest Softish vulnerabilities
- 7.6 High severity
EarVision Android application: Authentication Bypass by Spoofing
An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior.
- 8.8 High severity
EarVision Android application: Use of Hard-coded Credentials
An attacker could derive the camera's Wi-Fi password and connect to its wireless network. This weakens or eliminates the security value of the access-point password and may expose the live video stream, device services, status interfaces, and firmware-update f
- 8.0 High severity
EarVision Android application: Missing Authentication for Critical Functionality
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.