CVE-2026-111281

Summary

The Jooan JA-A12 IP camera contains hard-coded credentials that allow unauthenticated remote code execution, enabling attackers to run arbitrary commands as root on the device. This vulnerability affects multiple firmware versions and allows full device compromise without authentication.

Exploitability

Exploitation is extremely easy with no prerequisites - attackers simply need to send a single HTTP request to /goform/SingleHandlebyCommand with crafted parameters to trigger command execution as root.

Blast radius

The vulnerability affects all Jooan JA-A12 cameras running firmware versions 009_20171107 or 05.02.31.105, potentially exposing thousands of devices to remote compromise with minimal effort from attackers.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 05.02.31.106 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.