CVE-2026-5386
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A critical unauthenticated password reset vulnerability in KMW CCTV Security Cameras. An attacker can remotely reset the administrator password to a known value without authentication, gaining full access to camera feeds and settings.
Risk Assessment
An attacker can take control of cameras, monitor premises without consent, change settings, or disrupt recording.
Recommendation
Update KMW CCTV camera firmware to the latest version that fixes this vulnerability. Change default passwords and restrict network access to cameras.
Original NVD description (English source)
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.