Vulnerabilities

CVSS

9.1 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Risk score

72.8

Published

2026-05-20

Status

Published

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.

Weaknesses

CWE-288

Coverage 1

vulnerability

ZKTeco CCTV Cameras

A vulnerability has been identified in ZKTeco CCTV cameras, specifically models utilizing the SSC335-GC2063-Face-0b77 Solution firmware, allowing unauthorized access to camera credentials and configuration information. T…

CISA Advisories · May 19, 2026 Medium

CVE-2026-8598CHcctvcameraauthentication

All articles mentioning it

Advisories and references

• zkteco.com/en/announcement/23
• cisa.gov/news-events/ics-advisories/icsa-26-139-04
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...