Unpatched Edimax IP camera flaw actively exploited in botnet attacks

Akamai researchers disclosed a critical OS command injection vulnerability (CVE-2025-1316, CVSS 9.3) in the Edimax IC-7100 IP camera that is actively exploited by botnet malware to compromise devices; the vendor considers the device end-of-life and has not provided a patch, so CISA and researchers recommend isolating or replacing affected cameras and minimizing their Internet exposure.