Vulnerabilities

CVSS

7.2 High

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Risk score

57.6

Published

2026-06-26

Status

Published

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or malformed data in locations intended for trusted certificate material, which could affect system integrity or behavior even after reboot.

Weaknesses

CWE-434

Coverage 1

vulnerability

H.VIEW HV-500S6 IP Camera

This CISA advisory details a critical vulnerability in H.VIEW HV-500S6 IP cameras, specifically version IPCAM_V4.06.88.251229. The vulnerability allows authenticated users to upload malicious files and execute arbitrary…

CISA Advisories · Jun 25, 2026 Critical

CVE-2026-55975CVE-2026-56414CHcertificateinput validationcommand injection

All articles mentioning it

Advisories and references

• hviewsmart.com/pages/contact-us
• cisa.gov/news-events/ics-advisories/icsa-26-176-05
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...