57801 matches found
CVE-2026-32649
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-32644
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
CVE-2026-27785
Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...
PT-2026-36157
šØ CVE-2024-54011 Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report fo...
Milesight AIOT camera äæ”ä»»ē®”ēé®é¢ę¼ę“
The Milesight AIOT camera is a series of intelligent video monitoring and IoT integration cameras developed by the company China Starlong Connectivity. The Milesight AIOT camera has a vulnerability related to trust management, which stems from hardcoded credentials contained in the firmware...
PT-2026-35674
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A camera system fails to properly validate input, which allows specially crafted requests containing malicious commands to be executed on the device. This is a...
PT-2026-35675
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A security flaw exists in the request handling of the web server component. Under certain conditions, this issue could allow unintended access to protected...
PT-2026-35645
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
PT-2026-35820
Name of the Vulnerable Software and Affected Versions Snap One WattBox 800 and 820 series versions prior to 2.10.0.0 Description Undisclosed diagnostic HTTP endpoints require only the device MAC address and service tag for authentication. Both values are printed in plaintext on the physical devic...
PT-2026-35646
A post-authentication command injection vulnerability in the āDomainNameā parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected...
EUVD-2026-25956
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-20766
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-20766
CVE-2026-20766 affects Milesight AIOT cameras with specific firmware versions, describing a heap-based out-of-bounds memory access vulnerability. The base CVSS scores (4.0/3.1) indicate HIGH impact to confidentiality, integrity, and availability (network-exposed, low complexity, no privileges, no...
CVE-2026-20766 Milesight Cameras Heap-based Buffer Overflow
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-20766 Milesight Cameras Heap-based Buffer Overflow
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-32649 Milesight Cameras OS Command Injection
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-32649 Milesight Cameras OS Command Injection
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-32649
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
EUVD-2026-25958
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-32649
CVE-2026-32649 describes a command injection vulnerability in the web server of specific firmware versions on Milesight cameras. The affected surface is the camera web server, with the root cause stated as a command injection flaw. Impact metrics indicate high impact to confidentiality, integrity...