What’s Vulnerable › Vulnerabilities

CVE-2025-55810

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-13 · updated 2026-06-17
• Weakness: CWE-434

Description

A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.

Affected products

• Alagaai S-Cw2503C-H Firmware: 1.4.2

References

• https://www.alagaai.com/
• https://www.mgm-sp.com/privilege-escalation-vulnerability-in-alaga-home-security-wifi-camera

Get alerted when CVE-2025-55810 or the next vulnerability affects your stack