CVE-2026-37270 affects Trueview Security camera T18161-AF firmware version 4.9.60.0. The vulnerability arises from improper password validation combined with hard-coded credentials embedded in the firmware, enabling an attacker to bypass authentication mechanisms. This results in unauthorized access with full control over the device. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an unauthenticated attacker to bypass authentication controls and gain full administrative access to the affected security camera. This compromises the confidentiality of video streams and device data, integrity of device settings, and availability of the camera service. Given the critical CVSS score, the impact is severe and could facilitate further attacks on the network or privacy violations.

No official patch or remediation is currently available. Users should monitor the vendor's communications for updates and consider isolating affected devices from untrusted networks until a fix is released. Applying network-level access controls to restrict access to the device may reduce exposure. Avoid deploying version 4.9.60.0 in sensitive environments until remediation is provided.