This vulnerability (CVE-2026-81640) in the Softish EarVision Android application version 1.3.1 involves improper handling of sensitive information (CWE-798), allowing an attacker to derive the camera's Wi-Fi password. Exploiting this weakness can lead to unauthorized connection to the device's wireless network, thereby exposing live video streams, device services, status interfaces, and firmware-update capabilities. The CVSS 4.0 base score is 8.7, indicating a high impact with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to bypass Wi-Fi access controls by deriving the camera's Wi-Fi password. This can lead to unauthorized network access, exposure of live video streams, manipulation or disruption of device services, access to status interfaces, and potential unauthorized firmware updates. The overall impact compromises confidentiality, integrity, and availability of the device and its data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been provided at this time. Users of version 1.3.1 should monitor vendor communications for updates and consider restricting network access to the device until a patch is available.