CVE-2026-111281— Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials
Quick assessment
Affected
Jooan JA-A12
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Jooan JA-A12 型号 IP 摄像机（固件版本 009_20171107 和 05.02.31.105）中存在一个远程代码执行漏洞，未授权的攻击者可以通过硬编码凭据以 root 权限执行命令。攻击者向 发送包含 以及攻击者自定义的 和 的请求，从而促使 守护进程通过 执行攻击者指定的命令，最终导致攻击者获得设备的完全控制权。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111281
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials
Source: CVE Program / CVE List V5
Vulnerability Description
Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen authserverip and authcode, making the jooandiag daemon execute their commands through /bin/sh, giving full device control.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-111281
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111281
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-111281 (1)
IV. Related Vulnerabilities
Same weakness: CWE-798
-
CVE-2026-107617
Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Cr -
CVE-2026-105033
EnergizeLab AI Station Default Root Credentials with SSH Ena -
CVE-2026-77427
FileRise: Insecure default cryptographic key fallback in man -
CVE-2026-110667
cemtan sar2html sar2html.py hard-coded credentials -
CVE-2026-81964
Windows Update Orchestrator Service Security Feature Bypass
V. Comments for CVE-2026-111281
No comments yet