CVE-2026-50245 describes a vulnerability in Brickcom Cube cameras version 3.2.3.5.6 where the /ONVIF endpoint permits unauthenticated access to live snapshot images. This missing authentication control allows any attacker with network access to retrieve still images from the camera feed without credentials, potentially compromising confidentiality. The vulnerability is categorized under CWE-306, indicating a lack of authentication for a critical function. No official patch or remediation has been documented as of the publication date.

The vulnerability allows unauthorized users to access live snapshot images from affected Brickcom Cube cameras, leading to a high confidentiality impact. Attackers can view sensitive visual information without authentication. Integrity and availability impacts are not indicated. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Brickcom's advisories for updates. Until a patch is available, restricting network access to the cameras and isolating them from untrusted networks may reduce exposure.