CVE-2026-38740 describes a vulnerability in Foscam VD1 Video Doorbell devices prior to version V5.3.13_1072 where sensitive SDP information, including ICE credentials and candidates, is transmitted in cleartext. This cleartext transmission exposes these credentials to interception by attackers with network access, potentially enabling media stream hijacking or misuse of the vendor's relay infrastructure. The vulnerability is due to lack of encryption on sensitive signaling data over network interfaces. No CVSS score or vendor advisory with patch information is available.

An attacker with network visibility can intercept sensitive SDP credentials, which may allow hijacking of video/audio media streams or unauthorized authentication to Foscam's TURN/relay infrastructure. This could result in unauthorized media access or abuse of vendor resources to relay arbitrary traffic. There is no current evidence of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit network exposure of the device and monitor for unusual network activity related to media streams or relay usage. Avoid using affected versions in untrusted network environments.