CVE-2026-111281

Jooan JA-A12 IP cameras with specific firmware versions allow unauthenticated remote code execution via hard-coded credentials, enabling attackers to run root commands and fully control the device.

The vulnerability in Jooan JA-A12 IP cameras allows unauthenticated attackers to execute arbitrary root commands by exploiting hard-coded credentials and a specific API endpoint. This is a critical failure for DIB organizations because it represents a severe exposure of networked surveillance hardware, which could be used for lateral movement, data exfiltration, or as a foothold for ransomware. Organizations must immediately patch affected firmware versions and segment these devices from critical networks.

Shame score — The vendor shipped devices with hard-coded credentials and a remote code execution vulnerability that allowed unauthenticated attackers full device control, indicating a severe lack of basic security hygiene and avoidable negligence.