CVE-2026-27785 Milesight Cameras Use of Hard-coded Credentials

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

CVE-2026-27785

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

CVE-2026-27785

CVE-2026-27785 affects specific Milesight AIOT camera firmware versions that contain hard-coded credentials. The vulnerability arises from credentials embedded in the firmware, enabling adjacent attackers with low complexity and no privileges required to access confidentiality, integrity, and ava...

CVE-2026-28747 Milesight Cameras Authorization Bypass Through User-Controlled Key

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed...

CVE-2026-28747

CVE-2026-28747 : A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras that allows authorization to be bypassed. Affected product is Milesight AIOT cameras; root cause is weak key generation in firmware. Impact is high on confidentiality, integrity, an...

CVE-2026-28747 Milesight Cameras Authorization Bypass Through User-Controlled Key

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed...

EUVD-2026-25929

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed...

PT-2026-35569

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

PT-2026-35544

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

PT-2026-35568

CVE-2026-20766 Out-of-Bounds Memory Access Vulnerability in Milesight AIOT Camera Firmware https://t.co/bOLMdk1JR9...

PT-2026-35538

Name of the Vulnerable Software and Affected Versions Milesight AIOT cameras affected versions not specified Description A weak key generation issue allows authorization to be bypassed. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-35570

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...

CVE-2025-50669

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 and DI-8003G 19.12.10A1 due to improper handling of the wanping parameter in the /wanping.asp endpoint...

CVE-2025-50669

The CVE-2025-50669 issue affects D-Link DI-8003 (16.07.26A1) and DI-8003G (19.12.10A1) due to improper handling of the wan_ping parameter in the /wan_ping.asp endpoint, causing a buffer overflow. Multiple connected sources (CNVD, Red Hat, NVD, CNNVD, ENISA EUVD, CVE/CVEList) confirm a boundary-ch...

CVE-2017-20235

CVE-2017-20235 affects ProSoft Technology ICX35-HWC gateways (firmware version 1.3 and earlier). The issue is an authentication bypass in the web user interface that lets unauthenticated attackers access administrative functions and full device configuration without valid credentials. Affected co...

PT-2026-28262

Ubiquiti UniFi Network Controller prior to 5.10.12 excluding 5.6.42, UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weakness...

CVE-2026-25819

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they hav...

CVE-2026-26948

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially explo...

CVE-2025-11500

Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off which is a default setting, an unauthenticated attacker on...

TP-LINK TL-WR841N 安全漏洞

The TP-LINK TL-WR841N is a wireless router produced by TP-LINK Corporation. Versions of the TP-LINK TL-WR841N prior to v14 EN0.9.1 4.19 Build 260303 Rel.42399n V14260303 and US0.9.1.4.19 Build 260312 Rel.49108n V140304 contained security vulnerabilities. These vulnerabilities were caused by...