CVE-2026-94204

HIGH 7.5

Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, and firmware files are exposed to anyone on the internet.

CWE	CWE-732
Vendor	viidure
Product	dashcam android application
Published	Sep 29, 2026
Last Updated	Sep 29, 2026

Stay Ahead of the Next One

Get instant alerts for viidure dashcam android application

Be the first to know when new high vulnerabilities affecting viidure dashcam android application are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Viidure / Dashcam Android Application

0 ≤ 3.3.1.260403

References

NVD ↗ CVE.org ↗ EPSS Data ↗

viidure.app: https://viidure.app/ cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07 github.com: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-07.json

Credits

🔍 Bugrahan Karahan