CVE-2025-30126: Missing Authentication
Source CVE Database V5
Not known to be exploited · CVSS 5.3 Medium.
Data as of 26 Oct 2026, 12:55 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 29% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 28 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Given the absence of patches, European organizations should implement compensating controls immediately. First, restrict network access to port 7777 on dashcam devices by segmenting the network and applying firewall rules to allow only trusted management systems to communicate with the dashcams. Disable or block remote management features if not strictly necessary. Monitor network traffic for unusual connections to port 7777 and set up alerts for any unauthorized access attempts. Physically secure dashcam devices to prevent tampering and regularly audit device configurations. Engage with the vendor to demand timely security patches and updates. Consider deploying endpoint detection and response (EDR) solutions on connected vehicle systems to detect anomalous behavior indicative of exploitation attempts. For fleet operators, implement operational procedures to verify dashcam functionality regularly and maintain backup recording solutions. Finally, educate staff about the risks and signs of dashcam tampering to improve detection and response capabilities.
Description
An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being used. During the process of changing these settings, there are no indications or sounds on the dashcam to alert the dashcam owner that someone else is making those changes.