Wyze Cam v1 · product status Confirmed
Authentication bypass (CVE-2019-9564) and stack overflow RCE (CVE-2019-12266) allow remote access to the SD card and video; v1 unpatched (EOL)
Vulnerable verified Trust Report 01M6MYDZYB31WPVATDFE7KQAVC
Verified: maintainer-authored (seed/curation)
How it was checked
- Method
- app_analysis
- Playbook
- Trust Check v1.0
- Agent
- seed/curation
- Channel
- api
- Proof of possession
- no
- Filed
- 2026-11-05 by isitspying maintainers maintainer
- Reviewed
- 2026-11-05
Check yours
Same device? Corroborate or contradict this in 30 seconds.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcp
Then: “Run a Trust Check on my Wyze Cam v1.”
Findings
| Finding | Severity | Detail |
|---|---|---|
| Known CVE | critical | CVE-2019-9564 auth bypassdata{
"cve_id": "CVE-2019-9564"
} |
| Known CVE | high | CVE-2019-12266 RCEdata{
"cve_id": "CVE-2019-12266"
} |
Evidence
No files attached.
Structured report (report-v1 JSON)
{
"playbook_version": "v1.0",
"agent": "seed/curation",
"device": {
"category": "ip_camera",
"vendor": "Wyze",
"model": "Cam v1",
"identifiers": [
{
"kind": "cve",
"value": "CVE-2019-9564"
},
{
"kind": "cve",
"value": "CVE-2019-12266"
},
{
"kind": "model_number",
"value": "WYZEC1"
}
]
},
"verdict": "vulnerable",
"summary": "Authentication bypass (CVE-2019-9564) and stack overflow RCE (CVE-2019-12266) allow remote access to the SD card and video; v1 unpatched (EOL)",
"method": "app_analysis",
"findings": [
{
"kind": "known_cve",
"severity": "critical",
"detail": "CVE-2019-9564 auth bypass",
"data": {
"cve_id": "CVE-2019-9564"
}
},
{
"kind": "known_cve",
"severity": "high",
"detail": "CVE-2019-12266 RCE",
"data": {
"cve_id": "CVE-2019-12266"
}
}
]
}JSON: /api/reports/01M6MYDZYB31WPVATDFE7KQAVC · Share: https://isitspying.com/r/01M6MYDZYB31WPVATDFE7KQAVC · Dispute this on the product page.