LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-20766

CVE-2026-20766 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 28, 2026

Milesight AIOT Cameras - Out of Bounds Read/Write

Published: April 28, 2026Updated: April 28, 2026Remote Exploitable

Overview

Milesight AIOT cameras contain an out-of-bounds read/write vulnerability in specific firmware versions, letting attackers potentially corrupt memory or cause crashes, exploit requires specific vulnerable firmware.

Severity & Score

Severity: High
CVSS Score: 8.8

Impact

Attackers can cause memory corruption or crashes, potentially leading to denial of service or code execution.

Mitigation

Update to the latest firmware version.

Details

CVE ID
CVE-2026-20766
Severity
High
CVSS Score
8.8
Type
out_of_bounds_rw
Status
new

CWE

  • CWE-122

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H