EUVD-2026-76189

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

EUVD-2026-76190

An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...

CVE-2026-79393

A heap-based buffer overflow in the WS-Addressing Action transformation function of the Sofia IPC daemon in Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier) allows remote unauthenticated attackers to trigger a denial of service or potentially execute arbitrary code by sendi...

CVE-2026-79394

Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier ) ships with an insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon . Authentication is disabled by default, allowing remote unauthenticated attackers to access live H.264 video and...

CVE-2026-79395

CVE-2026-79395 is a CRITICAL (CVSS 9.8) improper authentication flaw in the Sofia IPC daemon of the Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier). The vulnerability resides in the WS-Security (wsse:UsernameToken) verification routine: when the admin account's stored pass...