[ CVE-2026-94204 · Published 29 Sep 2026 ]
Vulnerability in Viidure Dashcam Android Application
CVSS 7.5
EPSS <1%No fix listed yet
[ Description ]Official description
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, and firmware files are exposed to anyone on the internet.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.