Vulnerabilities

CVSS

7.2 High

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Risk score

57.6

Published

2026-06-26

Status

Published

A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device's certificate generation interface, which are incorporated into a backend certificate creation command without proper input validation. This may allow for command execution with elevated privileges during certificate generation.

Weaknesses

CWE-78

Coverage 1

vulnerability

H.VIEW HV-500S6 IP Camera

This CISA advisory details a critical vulnerability in H.VIEW HV-500S6 IP cameras, specifically version IPCAM_V4.06.88.251229. The vulnerability allows authenticated users to upload malicious files and execute arbitrary…

CISA Advisories · Jun 25, 2026 Critical

CVE-2026-55975CVE-2026-56414CHcertificateinput validationcommand injection

All articles mentioning it

Advisories and references

• hviewsmart.com/pages/contact-us
• cisa.gov/news-events/ics-advisories/icsa-26-176-05
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...