CVE Catalog
CVE-2026-32649
MediumCVSS 6.8Exploitation Probability (EPSS)
Elevated risk0.86%
55th percentile - higher than 55% of all known CVEs
Summary
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.
Risk Assessment
The organization risks that an attacker can remotely execute arbitrary commands on the camera, potentially leading to device takeover and access to the internal network.
Recommendation
It is recommended to update the firmware of Milesight cameras to the latest available version.
Original NVD description (English source)
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.