news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-5386

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
9.1 Critical
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Risk score
72.8
Published
2026-05-29
Status
Published

The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an attacker to remotely reset the administrator password to a known value without authentication, granting full access to the camera feeds and settings.

Weaknesses

CWE-620

Coverage 2

vulnerability

KMW CCTV Security Cameras

This advisory details a critical vulnerability in KMW CCTV Security Cameras, specifically versions KM-IP521 (V4.04.91.230307) and KM-IP421 (V4.04.53.210416), allowing unauthorized access to camera feeds and settings via…

CISA Advisories · May 28, 2026 Critical

Advisories and references