CVE-2026-66887: The affected products are missing authorization on

The affected products are missing authorization on state-changing CGIs and session checks are not performed.

• EPSS 0.3% (26.1% percentile)
• CVSS 9.4 critical

Related briefings

• Camera flaws hand strangers your live security video 2026-09-15

Browse the CVE database

Read the full analysis on IntelFusions