62926 matches found
PT-2026-35645
A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated, adjacent attacker with administrator privileges to execute OS commands on an affected device...
PT-2026-35646
A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions through 5.50ABVY.7.1C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected...
CVE-2026-20766
CVE-2026-20766 affects Milesight AIOT cameras with specific firmware versions, describing a heap-based out-of-bounds memory access vulnerability. The base CVSS scores (4.0/3.1) indicate HIGH impact to confidentiality, integrity, and availability (network-exposed, low complexity, no privileges, no...
CVE-2026-20766 Milesight Cameras Heap-based Buffer Overflow
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
EUVD-2026-25956
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-20766 Milesight Cameras Heap-based Buffer Overflow
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-20766
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras...
CVE-2026-32649
CVE-2026-32649 describes a command injection vulnerability in the web server of specific firmware versions on Milesight cameras. The affected surface is the camera web server, with the root cause stated as a command injection flaw. Impact metrics indicate high impact to confidentiality, integrity...
CVE-2026-32649 Milesight Cameras OS Command Injection
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
EUVD-2026-25958
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-32649
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
CVE-2026-32649 Milesight Cameras OS Command Injection
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras...
EUVD-2026-25957
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
CVE-2026-32644
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
CVE-2026-32644 Milesight Cameras Use of Hard-coded Cryptographic Key
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
CVE-2026-32644 Milesight Cameras Use of Hard-coded Cryptographic Key
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
CVE-2026-27785 Milesight Cameras Use of Hard-coded Credentials
Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...
CVE-2026-27785
CVE-2026-27785 affects specific Milesight AIOT camera firmware versions that contain hard-coded credentials. The vulnerability arises from credentials embedded in the firmware, enabling adjacent attackers with low complexity and no privileges required to access confidentiality, integrity, and ava...