CVE-2026-89175 Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication
Unauthenticated attackers can bypass client-side authentication to access restricted pages and view partial system configuration values.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-89175?
CVE-2026-89175 is a medium-severity authentication bypass vulnerability in Kingdom Communication Associated EH1000B, published on 11 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.
Weakness: CWE-602
Which versions are affected by CVE-2026-89175?
How do I fix CVE-2026-89175?
No fix has been published for CVE-2026-89175 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-89175 being exploited?
There is no known exploitation of CVE-2026-89175 in the wild and no public exploit code.
Sources
Also known as GHSA-jhv8-rq8g-hhm5.