CVE-2006-2490: Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5....

Security readout for executives and security teams

This older Mobotix camera issue lets a remote attacker inject script or HTML through vulnerable camera web pages. In business terms, exposed camera management interfaces could be used to target administrators viewing crafted content, potentially affecting trust in camera administration sessions. The bundle does not provide CVSS scoring or evidence of current exploitation. Exposure is most likely where legacy Mobotix M1, M10, D10, or M22 camera web interfaces remain reachable by users or networks that attackers can influence. Internet-facing management portals increase concern. The affected product list in the CVE record is incomplete, so asset inventory is important. Treat this as a legacy exposure cleanup issue. It is not supported as actively exploited here, but externally reachable camera administration surfaces are operationally sensitive and should be upgraded or isolated. Mitigation focus: Inventory Mobotix M1, M10, D10, and M22 camera firmware versions.; Upgrade M10/D10 to 2.2.3.18 or later where applicable.; Upgrade M22 to 3.0.3.31 or later where applicable..

Prepared

Jun 29, 2026, 12:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.