Is CVE-2026-85083 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-85083 being exploited in the wild.

How severe is CVE-2026-85083?

Medium severity, with a CVSS score of 6.8, published 11 September 2026.

Which products and versions are affected?

CareCam AJL33PC0801 Bootloader U-Boot 2010.06 compiled 2020-08-26 (firmware linux_linux_202008261138_svn13796).

Is there a fix for CVE-2026-85083?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-85083 attacked?

It is attacked with physical access, in a network appliance.

Am I affected by CVE-2026-85083?

Check whether you run CareCam AJL33PC0801 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-85083: ANJIA AJL33PC0801 hard-coded bootloader credential

CVE-2026-85083 · Severity: medium · CVSS 6.8 · Published 2026-09-11

The ANJIA AJL33PC0801 IP camera used in the CareCam Pro IP Cameras product line contains a hard-coded credential for bootloader authentication. An attacker with physical access to the device can exploit this weakness to gain privileged bootloader access, allowing complete unauthorized modification of firmware and system configuration, resulting in full device compromise and potential surveillance or control of the camera system.

Vendors: CareCam.

Quick answers

Is CVE-2026-85083 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-85083 being exploited in the wild.
How severe is CVE-2026-85083?: Medium severity, with a CVSS score of 6.8, published 11 September 2026.
Which products and versions are affected?: CareCam AJL33PC0801 Bootloader U-Boot 2010.06 compiled 2020-08-26 (firmware linux_linux_202008261138_svn13796).
Is there a fix for CVE-2026-85083?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-85083 attacked?: It is attacked with physical access, in a network appliance.
Am I affected by CVE-2026-85083?: Check whether you run CareCam AJL33PC0801 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is a use of hard-coded credentials (CWE-798) in the bootloader authentication mechanism of the ANJIA AJL33PC0801 IP camera. The affected firmware is linux_linux_202008261138_svn13796_/_Bootloader_U-Boot_2010.06_compiled_2020-08-26. The attack requires physical access to the device and no network connectivity, authentication, or user interaction—only physical proximity to the bootloader interface. An attacker exploiting this can modify firmware, alter system configuration, and achieve complete device compromise. No patch or firmware update from the vendor (CareCam) has been made available; CISA reports the vendor has not responded to coordination attempts.

Affected products

CareCam AJL33PC0801 Bootloader U-Boot 2010.06 compiled 2020-08-26 (firmware linux_linux_202008261138_svn13796)

Timeline

2026-09-08: disclosed: CISA ICSA-26-251-01 advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.