# CVE-2026-79390: Trueview TI8161 MQTT plaintext communication information disclosure

Source: https://junglewise.ai/threats/cve-2026-79390-trueview-ti8161-mqtt-plaintext-communication-information  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-04. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-79390 · Severity: high · CVSS 7.5 · Published 2026-09-04

The Trueview TI8161 security camera transmits MQTT messages in unencrypted plaintext over TCP port 1883. An attacker on the same network segment can intercept this traffic to obtain sensitive device information, operational commands, and authentication-related parameters without any credentials or decryption, potentially enabling follow-up attacks or unauthorized device control.

Vendors: [Trueview](https://junglewise.ai/threats/vendors/trueview).

## Quick answers

**Is CVE-2026-79390 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-79390 being exploited in the wild.

**How severe is CVE-2026-79390?** High severity, with a CVSS score of 7.5, published 4 September 2026.

**Which products and versions are affected?** Trueview TI8161 6.0.23.4.

**Is there a fix for CVE-2026-79390?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-79390 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-79390?** Check whether you run Trueview TI8161 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a lack of transport-layer encryption (TLS) on MQTT communications. The root cause is that the TI8161 camera transmits MQTT protocol messages over unencrypted TCP on port 1883. Attack vector is adjacent network access—an attacker capable of monitoring traffic on the same network segment can passively intercept these communications. The JSON payloads contain device identifiers, metadata, authentication parameters, and operational commands in human-readable plaintext. No authentication is required from the attacker; only network visibility is needed. This exposes sensitive operational data and may provide information to facilitate further attacks on the device or related infrastructure. A patch enabling TLS encryption for MQTT connections would mitigate this issue.

## Affected products

- Trueview TI8161 6.0.23.4

## Timeline

- 2026-09-04: disclosed

## References

- [https://github.com/EmbdCDACHyd/CVE/blob/main/CVE-2026-79390/README.md](https://github.com/EmbdCDACHyd/CVE/blob/main/CVE-2026-79390/README.md)