CVE-2026-89173 Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure
Unauthenticated attackers can enumerate valid user accounts on Kingdom Communication Smart Video Intercom systems due to sensitive data exposure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-89173?
CVE-2026-89173 is a medium-severity vulnerability in Kingdom Communication Associated EH1000B, published on 11 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.
Weakness: CWE-204
Which versions are affected by CVE-2026-89173?
How do I fix CVE-2026-89173?
No fix has been published for CVE-2026-89173 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-89173 being exploited?
There is no known exploitation of CVE-2026-89173 in the wild and no public exploit code.
Sources
Also known as GHSA-76xr-v7hf-hjj2.