<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wyze</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-6249: Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-6249.html</link><guid>https://patchthecve.com/cve/CVE-2024-6249.html</guid><pubDate>Wed, 17 Jun 2026 08:17:37 +0000</pubDate><description>HIGH 8.8: Wyze Cam v3 TCP Traffic Handling Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.

The spe</description></item><item><title>CVE-2024-6248: Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-6248.html</link><guid>https://patchthecve.com/cve/CVE-2024-6248.html</guid><pubDate>Wed, 17 Jun 2026 08:17:37 +0000</pubDate><description>HIGH 7.5: Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.

The specifi</description></item><item><title>CVE-2024-6247: Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-6247.html</link><guid>https://patchthecve.com/cve/CVE-2024-6247.html</guid><pubDate>Wed, 17 Jun 2026 08:17:37 +0000</pubDate><description>MEDIUM 6.8: Wyze Cam v3 Wi-Fi SSID OS Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.

The specific flaw exis</description></item><item><title>CVE-2024-6246: Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-6246.html</link><guid>https://patchthecve.com/cve/CVE-2024-6246.html</guid><pubDate>Wed, 17 Jun 2026 08:17:37 +0000</pubDate><description>HIGH 8.8: Wyze Cam v3 Realtek Wi-Fi Driver Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability.

The spec</description></item><item><title>CVE-2024-37066: A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows att</title><link>https://patchthecve.com/cve/CVE-2024-37066.html</link><guid>https://patchthecve.com/cve/CVE-2024-37066.html</guid><pubDate>Wed, 17 Jun 2026 07:37:42 +0000</pubDate><description>MEDIUM 6.8: A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to execute arbitrary commands over Bluetooth as root during the camera setup process.</description></item></channel></rss>