CVE-2026-56414

Deferred Deferred - Pending Action

Certificate File Upload Vulnerability in H.View IP Cameras

Publication date: 2026-06-26

Last updated on: 2026-06-29

Assigner: ICS-CERT

Description

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or malformed data in locations intended for trusted certificate material, which could affect system integrity or behavior even after reboot.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-26

Last Modified

2026-06-29

Generated

2026-07-17

AI Q&A

2026-06-27

EPSS Evaluated

2026-07-15

NVD

CVE-2026-56414

EUVD

EUVD-2026-39927

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability exists in H.View IP cameras' certificate-related upload interfaces. Authenticated users can upload arbitrary file content to fixed, persistent filesystem locations without any validation of the file type, structure, or size.

Because the system does not check the uploaded files, unexpected or malformed data can be placed in locations meant for trusted certificate material. This can compromise the system's integrity or behavior, even after the device is rebooted.

Impact Analysis

The vulnerability allows attackers with authenticated access to store arbitrary files in critical locations, potentially leading to system integrity issues or unexpected behavior.

This could result in compromised device functionality, persistent malicious code, or other security impacts that remain effective even after rebooting the device.

Hi! I’m here to help you understand CVE-2026-56414. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70