CVE-2026-89175— Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication
Quick assessment
Affected
Kingdom Communication Associated EH3040
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
由 Kingdom Communication Associated 开发的智能视频对讲系统存在客户端认证漏洞。未经身份验证的远程攻击者能够绕过身份认证，访问特定页面，并获取部分系统配置信息。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89175
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication
Source: CVE Program / CVE List V5
Vulnerability Description
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端安全的客户端实施
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kingdom Communication Associated | EH3040 | 0 ~ 2.5.0A | - |
|
| Kingdom Communication Associated | EH4200 | 0 ~ 2.5.0A | - |
|
| Kingdom Communication Associated | EH1000B | 0 ~ 2.7.0A | - |
|
| Kingdom Communication Associated | EH2070 | 0 ~ 2.8.0A | - |
|
II. Public POCs for CVE-2026-89175
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89175
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-89175 (2)
-
🔗 鎧鋒企業｜智慧對講系統 - 存在3個漏洞-TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報 third-party-advisory
-
Same Patch Batch · Kingdom Communication Associated · 2026-09-11 · 3 CVEs total
| CVE-2026-89174 | 7.5 HIGH | Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protect |
| CVE-2026-89173 | 5.3 MEDIUM | Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure |
IV. Related Vulnerabilities
Same weakness: CWE-602
-
CVE-2026-84841
tsi-coop tsi-dpdp-cms client-side enforcement of server-side -
CVE-2026-84110
Releasit Releasit COD Form & Upsells OTP Validation client-s -
CVE-2026-73267
Clusterclaims-controller: managedcluster deletion keyed sole -
CVE-2026-77026
Joomla Extension - tassos.gr - Client-controlled validation -
CVE-2026-45274
MyBooks: Unauthenticated Registration Bypass via Missing Ser
V. Comments for CVE-2026-89175
No comments yet