CVE-2026-94204

HIGHCVSS 7.5

Description

The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, and firmware files are exposed to anyone on the internet.

Timeline

Published:September 29th, 2026 9:19 PM

Last modified:September 29th, 2026 10:19 PM

CVSS Scoring

CVSS v3: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-732

References & Reports

Advisories, patches, and third-party reports

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-07.json
https://viidure.app/
https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07

Source: NIST NVD · Data may lag official sources by up to one minute