Security Advisory – Foscam ONVIF Service Vulnerability

Foscam is committed to protecting the privacy and security of our users and products. We recently addressed a security vulnerability related to the ONVIF service on certain Foscam camera models.

 

Remediation Status

Foscam has released firmware remediations for supported models. Firmware updates are available online through the official Foscam firmware download channel.

 

Models with firmware updates available

X1 / X2 / X3 / X4 / X5 / C1 / C1 V2 / C1 V3 / C1 Lite / C1 Lite V2 / C1 Lite V3 / C2 / C2 V2 / C2 V3 / C2M / C2M V6 / R2 / R2 V2 / R2 V3 / R2 V4 / R2 V5 / R2M / R2D / R2D V2 / R4 / R4M / R4M V3 / R4M V4 / R4M V5 / D2EP / D2EP V2 / D4Z / D4Z V3 / D4Z V4 / V4EC / VD1 / G4P / G4P V2 / G4EP / G4EP V2 / G4C / F41 / S41 / SD2 / SD2X / SD2X V3 / SD4 / SD4 V2 / SD4 V3 / FI9800P / FI9800P V2 / FI9800P V3 / FI9800E V2 / FI9800W V2 / FI9800XE V2 / FI9803P V2 / FI9803P V3 / FI9803P V4 / FI9816P / FI9816P V2 / FI9816P V3 / FI9821P V3 / FI9821EP V2 / FI9826P V3 / FI9831P V3 / FI9851P V2 / FI9851P V3 / FI9853EP V2 / FI9900P / FI9900P V2 / FI9900P V3 / FI9900P V4 / FI9900P V7 / FI9900EP / FI9900EP V2 / FI9900EP V3 / FI9900EP V4 / FI9900EP V5 / FI9901EP / FI9901EP V2 / FI9901EP V3 / FI9912P / FI9912EP / FI9928P / FI9928P V2 / FI9928P V3 / FI9936P / FI9961EP

 

Old models that have reached end-of-support and cannot receive further firmware updates due to hardware and firmware platform limitations

FI9800E / FI9800W / FI9800XE / FI9803EP / FI9803P / FI9804W / FI9805E / FI9805W / FI9818W V2 / FI9821EP / FI9821P / FI9821P V2 / FI9821W V2 / FI9821W V2.1 / FI9826P / FI9826P V2 / FI9826W / FI9828P V2 / FI9828W / FI9831P / FI9831P V2 / FI9831W / FI9851P / FI9853EP / FI9900E / FI9903P / FosBaby / FosBaby P1

 

Recommended User Actions

If your model is in the first list (firmware available)

Update your camera to the latest firmware version via the official Foscam website.

 

If your model is in the second list (no firmware update available)

Priority: Disable the ONVIF service on your device immediately via the Web UI or Foscam VMS.

 

Alternative: You may trade in your old device for a new one. For the specific trade-in policy, please contact the distributor where you purchased the device..

 

Additional precaution for all users

Use a strong, unique password for each camera.

 

Foscam takes the security of our products and services very seriously. If you have any questions, please contact support@foscam.com.

 

Effective Date: September 29, 2026

 

Please select the reception frequency of Newsletter
(Product info,exclusive deals&discount,Brand services)
Privacy Policy Newsletter Subscription Protocol