CVE-2026-89174 Kingdom Communication Associated CVE debrief

Who should care

Defenders responsible for Smart Video Intercom Systems, particularly those exposed to the internet, should assess their exposure and take steps to restrict access and monitor login attempts.

Why it matters

The Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability, which could allow unauthenticated remote attackers to gain access to valid accounts through a large number of login attempts. Defenders should prioritize verifying exposure of these systems to the internet and restricting access to prevent potential unauthorized access and brute-force attacks.

• Potential unauthorized access to valid accounts
• Possible brute-force attacks on Smart Video Intercom Systems

Technical summary

The Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts. The vulnerability is related to the system's inability to prevent brute-force attacks, which could lead to unauthorized access to valid accounts. Defenders should prioritize verifying exposure of these systems to the internet and restricting access to prevent potential unauthorized access and brute-force attacks.

Defensive priority

Defenders should prioritize verifying exposure of Smart Video Intercom Systems to the internet and restricting access to these systems.

Recommended defensive actions

• Verify exposure of Smart Video Intercom Systems to the internet
• Restrict access to Smart Video Intercom Systems
• Monitor login attempts to detect potential brute-force attacks

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the affected versions and remediation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.