Back Securityaffairs.Co

21,786 Home Cameras, No Password, No Warning

Securityaffairs.Co •Pierluigi Paganini • June 12, 2026

21,786 live cameras stream with zero authentication. Cheap gear is the real risk, webcamXP open 46% of the time. Your router is the broadcast tower. In May 2026, Mysterium VPN queried a public internet-wide device index to count every camera and recorder that answers the open internet. They found more than three million reachable […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Over 21,000 Live Cameras Exposed Without Authentication An investigation by Mysterium VPN found that 21,786 internet-connected cameras are streaming live video without any authentication, exposing significant privacy and security risks. The majority of these vulnerable devices are low-cost cameras, particularly from budget brands. These cameras utilize protocols like RTSP, allowing anyone who knows their IP address to access the feeds. Major countries affected include Japan and the United States, where residential broadband connections contribute to the issue. This vulnerability is not due to hacking but a failure to implement basic security practices, such as setting unique passwords. The findings mirror the vulnerabilities exploited by the Mirai botnet in 2016, which also targeted devices with default credentials. Despite regulatory efforts to ban default passwords, many older devices remain unprotected, risking exposure of sensitive information. 2 sources 67

Extracted Entities

21,786 Home Cameras, No Password, No Warning

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (1)

Tools (1)