My security camera shipped a GitHub admin token in its login page

Vulnerability Disclosure(hhh.hn)view on HackerNews
vulnerabilityGitHubHanwhasecurity camerafirmwaredisclosure

Author: hhh

Date: 7/24/2026

Article Summary:
The author discovers a GitHub token embedded in the firmware of Hanwha security cameras, allowing admin access to hundreds of repositories, and reports the issue to the company, which promptly revokes the token.