# CVE-2026-107607: Swann Communications SWIFI-SE2KIC missing authentication for video stream

Source: https://junglewise.ai/threats/cve-2026-107607-swifi-se2kic-firmware-versions-2-0-22-and-prior-are-vulnerable  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-107607 · Severity: medium · CVSS 6.2 · Published 2026-10-13

Swann Communications SWIFI-SE2KIC is a network security camera that streams video over IP networks. The firmware contains a critical authentication bypass that allows attackers on the local network to view live video feeds without logging in, exposing surveillance footage to unauthorized access.

Technologies: [Swann Communications SWIFI-SE2KIC](https://junglewise.ai/threats/technologies/swifi-se2kic). Vendors: [Swann Communications](https://junglewise.ai/threats/vendors/swann-communications).

## Quick answers

**Is CVE-2026-107607 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-107607 being exploited in the wild.

**How severe is CVE-2026-107607?** Medium severity, with a CVSS score of 6.2, published 13 October 2026.

**Which products and versions are affected?** Swann Communications SWIFI-SE2KIC 2.0.22 and prior.

**Is there a fix for CVE-2026-107607?** No fixed version is recorded yet. Keep the camera behind a secured router and firewall. Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Ensure the router and associated accounts use strong, unique passwords. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-107607 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-107607?** Check whether you run Swann Communications SWIFI-SE2KIC at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix


Keep the camera behind a secured router and firewall. Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access. Ensure the router and associated accounts use strong, unique passwords.

## Technical details

The vulnerability is a missing authentication check (CWE-306) in the RTSP video streaming service of the SWIFI-SE2KIC camera. An unauthenticated attacker on the local network can directly access the real-time video stream without credentials. No authentication requirements or user interaction is needed; the attack vector is limited to adjacent network access.

## Affected products

- Swann Communications SWIFI-SE2KIC 2.0.22 and prior

## Timeline

- 2026-10-13: disclosed

## References

- [https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-02](https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-02)

## Related threats

- [Swann Communications SWIFI-SE2KIC missing authentication in firmware](https://junglewise.ai/threats/cve-2026-107606-swifi-se2kic-firmware-versions-2-0-22-and-prior-are-vulnerable)
- [Swann Communications SWIFI-SE2KIC missing authentication](https://junglewise.ai/threats/cve-2026-107605-swann-communications-swifi-se2kic)