CVE-2026-79396
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.
Risk Assessment
An attacker can gain full control of the camera, including viewing footage, changing configuration, and using the device as an entry point into the network.
Recommendation
Immediately change default credentials, update firmware to a patched version, and isolate cameras in a dedicated VLAN.
Other vulnerabilities in Xiongmai IP Camera XM530
Original NVD description (English source)
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.