CVE-2026-59507
Received Received - Intake

Hard-Coded Credentials in Milesight AIOT Camera Firmware

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Israel National Cyber Directorate

Description
CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-59507
EUVD
EUVD-2026-57774

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the use of hard-coded credentials and improper access control, which can expose sensitive information to unauthorized users. It may also allow attackers to gain elevated access due to weak authentication mechanisms.

Impact Analysis

An attacker could exploit this to gain unauthorized access to systems or sensitive data, leading to data breaches, system compromise, or further network infiltration. The high CVSS score indicates significant risk.

Compliance Impact

This vulnerability likely violates compliance requirements such as GDPR (data protection) and HIPAA (health data security) due to unauthorized data exposure and weak access controls. Organizations may face penalties or legal consequences.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59507. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart