CVE-2026-79396
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.
Risk Assessment
An attacker can gain full control of the camera, including viewing footage, changing configuration, and using the device as an entry point into the network.
Recommendation
Immediately change default credentials, update firmware to a patched version, and isolate cameras in a dedicated VLAN.
Other vulnerabilities in Xiongmai IP Camera XM530
Original NVD description (English source)
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over the camera.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS