GCVE - cpe:2.3:a:milesight:ms-nxxxx-xxg:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:milesight:ms-nxxxx-xxg:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Milesight (`29e512ed-02e7-5a62-9acc-b8e7195e4ebe`)
Product	Ms Nxxxx Xxg (`97cae5e1-c84f-5560-8114-913fa9298b4b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-32649`	vulnerable	2026-06-08 07:57:17.890070	Milesight Cameras OS Command Injection MEDIUM (6.8) A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras. Published: 2026-04-27T23:42:44.761Z Updated: 2026-04-28T14:42:37.926Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json https://www.milesight.com/support/download/firmware	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-32644`	vulnerable	2026-06-08 07:57:17.823257	Milesight Cameras Use of Hard-coded Cryptographic Key CRITICAL (9.8) Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. Published: 2026-04-27T23:40:25.181Z Updated: 2026-04-28T14:45:19.107Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json https://www.milesight.com/support/download/firmware	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28747`	vulnerable	2026-06-08 07:55:15.575312	Milesight Cameras Authorization Bypass Through User-Controlled Key HIGH (7.1) A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed. Published: 2026-04-27T22:44:52.012Z Updated: 2026-04-28T14:35:33.191Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json https://www.milesight.com/support/download/firmware	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-27785`	vulnerable	2026-06-08 07:55:13.833528	Milesight Cameras Use of Hard-coded Credentials HIGH (8.8) Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials. Published: 2026-04-27T23:38:10.844Z Updated: 2026-04-28T12:40:37.832Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json https://www.milesight.com/support/download/firmware	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-20766`	vulnerable	2026-06-08 07:49:12.569709	Milesight Cameras Heap-based Buffer Overflow HIGH (8.8) An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. Published: 2026-04-27T23:45:52.896Z Updated: 2026-04-28T14:39:17.799Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03 https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-03.json https://www.milesight.com/support/download/firmware	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.