CVE-2026-27785 - Vulnerability Analysis

Overview

Milesight AIOT camera firmware contains hardcoded credentials, letting attackers gain unauthorized access, exploit requires no special privileges.

Severity & Score

Impact

Attackers can gain unauthorized access to the device using hardcoded credentials, compromising device security.

Mitigation

Update to the latest firmware version.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03
• https://www.milesight.com/support/download/firmware

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner