ByteOS Network

CVSS Score-8.6||HIGH

EPSS-0.04% / 11.93%

||

7 Day CHG~0.00%

Published-27 Apr, 2026 | 23:45

Updated-28 Apr, 2026 | 14:39

Milesight Cameras Heap-based Buffer Overflow

An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.

Vendor-Milesight

Product-MS-CQxx72-xxxG1 TS2867-X5TPC TS4466-X4RIPG1 MS-Nxxxx-xxC MS-Nxxxx-NxE MS-CQxx31-xxxG1 TS5510-GVH MS-Cxx66-xxxG1 MS-C2966-RFLWPC MS-CQxx68-xxxG1 TS8266-X4VPE MS-Cxx66-xxxGPE MS-C5366-X12LPC MS-Cxx67-xxxPE MS-Cxx62-xxxG1 MS-Cxx73-xPD TS2866-X4TPC MS-Nxxxx-xxG SC211 TS4466-X4RPE TS8266-X4WE TS2841-X36TPC TS8266-X4RIWG1 MS-Cxx76-PE TS2866-X4TVPC PMC8266-FGPE TS2966-X12TPE MS-Nxxxx-xxE TS4441-X36RPE TS2841-X36TPC/W MS-Cxx66-xxxxGOPC TS8266-X4RIVPG1 TS5366-X12PE MS-Cxx65-PE TS8266-FPC/P MS-C5366-X12LVPC MS-C2966-X12RLVPC TS5511-GVH TS4466-RFIVPG1 TS4466-X4RIWG1 MS-Cxx72-xxxG1 MS-Cxx75-xxPD TS8266-RFIVPG1 MS-Cxx66-xxxPE PM3322-E MS-C5321-FPE TS2961-X12TPC MS-C8477-HPG1 TS4441-X36RE MS-C2972-RFLPC MS-Nxxxx-xxH MS-C2964-RFLPC MS-Cxx72-RFIPKG1 TS5366-X12RIPG1 TS5366-X12VPE TS2866-X4TGPC TS5510-GH MS-C2966-X12RLPC MS-Cxx72-xxxPE TS2966-X12TVPE MS-Cxx62-xxxPE MS-C5361-X12LPC MS-Cxx74-PA MS-Cxx52-xxxPE MS-Cxx83-xPD MS-Cxx71-xxxPE TS4466-X4RVPE MS-Cxx72-FIPKG1 TS8266-X4PE SP111 MS-Cxx63-PD TS8266-X4RIPG1 MS-Cxx61-xxxPE MS-Cxx66-RFIPKG1 MS-Cxx64-xPD MS-Cxx66-FIPKG1 TS4466-X4RWE PMC8266-FPE MS-C8477-PC MS-Cxx41-xxxPE TS4466-X4RIVPG1 MS-Nxxxx-xxT

CWE ID-CWE-122

Heap-based Buffer Overflow

CVE-2026-32649

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-7.3||HIGH

EPSS-0.09% / 25.39%

||

7 Day CHG+0.01%

Published-27 Apr, 2026 | 23:42

Updated-28 Apr, 2026 | 14:42

Milesight Cameras OS Command Injection

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

Vendor-Milesight

Product-MS-CQxx72-xxxG1 TS2867-X5TPC TS4466-X4RIPG1 MS-Nxxxx-xxC MS-Nxxxx-NxE MS-CQxx31-xxxG1 TS5510-GVH MS-Cxx66-xxxG1 MS-C2966-RFLWPC MS-CQxx68-xxxG1 TS8266-X4VPE MS-Cxx66-xxxGPE MS-C5366-X12LPC MS-Cxx67-xxxPE MS-Cxx62-xxxG1 MS-Cxx73-xPD TS2866-X4TPC MS-Nxxxx-xxG SC211 TS4466-X4RPE TS8266-X4WE TS2841-X36TPC TS8266-X4RIWG1 MS-Cxx76-PE TS2866-X4TVPC PMC8266-FGPE TS2966-X12TPE MS-Nxxxx-xxE TS4441-X36RPE TS2841-X36TPC/W MS-Cxx66-xxxxGOPC TS8266-X4RIVPG1 TS5366-X12PE MS-Cxx65-PE TS8266-FPC/P MS-C5366-X12LVPC MS-C2966-X12RLVPC TS5511-GVH TS4466-RFIVPG1 TS4466-X4RIWG1 MS-Cxx72-xxxG1 MS-Cxx75-xxPD TS8266-RFIVPG1 MS-Cxx66-xxxPE PM3322-E MS-C5321-FPE TS2961-X12TPC MS-C8477-HPG1 TS4441-X36RE MS-C2972-RFLPC MS-Nxxxx-xxH MS-C2964-RFLPC MS-Cxx72-RFIPKG1 TS5366-X12RIPG1 TS5366-X12VPE TS2866-X4TGPC TS5510-GH MS-C2966-X12RLPC MS-Cxx72-xxxPE TS2966-X12TVPE MS-Cxx62-xxxPE MS-C5361-X12LPC MS-Cxx74-PA MS-Cxx52-xxxPE MS-Cxx83-xPD MS-Cxx71-xxxPE TS4466-X4RVPE MS-Cxx72-FIPKG1 TS8266-X4PE SP111 MS-Cxx63-PD TS8266-X4RIPG1 MS-Cxx61-xxxPE MS-Cxx66-RFIPKG1 MS-Cxx64-xPD MS-Cxx66-FIPKG1 TS4466-X4RWE PMC8266-FPE MS-C8477-PC MS-Cxx41-xxxPE TS4466-X4RIVPG1 MS-Nxxxx-xxT

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2026-32644

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-9.2||CRITICAL

EPSS-0.03% / 8.30%

||

7 Day CHG+0.01%

Published-27 Apr, 2026 | 23:40

Updated-28 Apr, 2026 | 14:45

Milesight Cameras Use of Hard-coded Cryptographic Key

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

Vendor-Milesight

Product-MS-CQxx72-xxxG1 TS2867-X5TPC TS4466-X4RIPG1 MS-Nxxxx-xxC MS-Nxxxx-NxE MS-CQxx31-xxxG1 TS5510-GVH MS-Cxx66-xxxG1 MS-C2966-RFLWPC MS-CQxx68-xxxG1 TS8266-X4VPE MS-Cxx66-xxxGPE MS-C5366-X12LPC MS-Cxx67-xxxPE MS-Cxx62-xxxG1 MS-Cxx73-xPD TS2866-X4TPC MS-Nxxxx-xxG SC211 TS4466-X4RPE TS8266-X4WE TS2841-X36TPC TS8266-X4RIWG1 MS-Cxx76-PE TS2866-X4TVPC PMC8266-FGPE TS2966-X12TPE MS-Nxxxx-xxE TS4441-X36RPE TS2841-X36TPC/W MS-Cxx66-xxxxGOPC TS8266-X4RIVPG1 TS5366-X12PE MS-Cxx65-PE TS8266-FPC/P MS-C5366-X12LVPC MS-C2966-X12RLVPC TS5511-GVH TS4466-RFIVPG1 TS4466-X4RIWG1 MS-Cxx72-xxxG1 MS-Cxx75-xxPD TS8266-RFIVPG1 MS-Cxx66-xxxPE PM3322-E MS-C5321-FPE TS2961-X12TPC MS-C8477-HPG1 TS4441-X36RE MS-C2972-RFLPC MS-Nxxxx-xxH MS-C2964-RFLPC MS-Cxx72-RFIPKG1 TS5366-X12RIPG1 TS5366-X12VPE TS2866-X4TGPC TS5510-GH MS-C2966-X12RLPC MS-Cxx72-xxxPE TS2966-X12TVPE MS-Cxx62-xxxPE MS-C5361-X12LPC MS-Cxx74-PA MS-Cxx52-xxxPE MS-Cxx83-xPD MS-Cxx71-xxxPE TS4466-X4RVPE MS-Cxx72-FIPKG1 TS8266-X4PE SP111 MS-Cxx63-PD TS8266-X4RIPG1 MS-Cxx61-xxxPE MS-Cxx66-RFIPKG1 MS-Cxx64-xPD MS-Cxx66-FIPKG1 TS4466-X4RWE PMC8266-FPE MS-C8477-PC MS-Cxx41-xxxPE TS4466-X4RIVPG1 MS-Nxxxx-xxT

CWE ID-CWE-321

Use of Hard-coded Cryptographic Key

CVE-2026-27785

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-7.7||HIGH

EPSS-0.02% / 5.00%

||

7 Day CHG~0.00%

Published-27 Apr, 2026 | 23:38

Updated-28 Apr, 2026 | 12:40

Milesight Cameras Use of Hard-coded Credentials

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials.

Vendor-Milesight

Product-MS-CQxx72-xxxG1 TS2867-X5TPC TS4466-X4RIPG1 MS-Nxxxx-xxC MS-Nxxxx-NxE MS-CQxx31-xxxG1 TS5510-GVH MS-Cxx66-xxxG1 MS-C2966-RFLWPC MS-CQxx68-xxxG1 TS8266-X4VPE MS-Cxx66-xxxGPE MS-C5366-X12LPC MS-Cxx67-xxxPE MS-Cxx62-xxxG1 MS-Cxx73-xPD TS2866-X4TPC MS-Nxxxx-xxG SC211 TS4466-X4RPE TS8266-X4WE TS2841-X36TPC TS8266-X4RIWG1 MS-Cxx76-PE TS2866-X4TVPC PMC8266-FGPE TS2966-X12TPE MS-Nxxxx-xxE TS4441-X36RPE TS2841-X36TPC/W MS-Cxx66-xxxxGOPC TS8266-X4RIVPG1 TS5366-X12PE MS-Cxx65-PE TS8266-FPC/P MS-C5366-X12LVPC MS-C2966-X12RLVPC TS5511-GVH TS4466-RFIVPG1 TS4466-X4RIWG1 MS-Cxx72-xxxG1 MS-Cxx75-xxPD TS8266-RFIVPG1 MS-Cxx66-xxxPE PM3322-E MS-C5321-FPE TS2961-X12TPC MS-C8477-HPG1 TS4441-X36RE MS-C2972-RFLPC MS-Nxxxx-xxH MS-C2964-RFLPC MS-Cxx72-RFIPKG1 TS5366-X12RIPG1 TS5366-X12VPE TS2866-X4TGPC TS5510-GH MS-C2966-X12RLPC MS-Cxx72-xxxPE TS2966-X12TVPE MS-Cxx62-xxxPE MS-C5361-X12LPC MS-Cxx74-PA MS-Cxx52-xxxPE MS-Cxx83-xPD MS-Cxx71-xxxPE TS4466-X4RVPE MS-Cxx72-FIPKG1 TS8266-X4PE SP111 MS-Cxx63-PD TS8266-X4RIPG1 MS-Cxx61-xxxPE MS-Cxx66-RFIPKG1 MS-Cxx64-xPD MS-Cxx66-FIPKG1 TS4466-X4RWE PMC8266-FPE MS-C8477-PC MS-Cxx41-xxxPE TS4466-X4RIVPG1 MS-Nxxxx-xxT

CWE ID-CWE-798

Use of Hard-coded Credentials

CVE-2026-28747

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

View Details

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

CVSS Score-7.3||HIGH

EPSS-0.02% / 3.55%

||

7 Day CHG~0.00%

Published-27 Apr, 2026 | 22:44

Updated-28 Apr, 2026 | 14:35

Milesight Cameras Authorization Bypass Through User-Controlled Key

A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.

Vendor-Milesight

Product-MS-CQxx72-xxxG1 TS2867-X5TPC TS4466-X4RIPG1 MS-Nxxxx-xxC MS-Nxxxx-NxE MS-CQxx31-xxxG1 TS5510-GVH MS-Cxx66-xxxG1 MS-C2966-RFLWPC MS-CQxx68-xxxG1 TS8266-X4VPE MS-Cxx66-xxxGPE MS-C5366-X12LPC MS-Cxx67-xxxPE MS-Cxx62-xxxG1 MS-Cxx73-xPD TS2866-X4TPC MS-Nxxxx-xxG SC211 TS4466-X4RPE TS8266-X4WE TS2841-X36TPC TS8266-X4RIWG1 MS-Cxx76-PE TS2866-X4TVPC PMC8266-FGPE TS2966-X12TPE MS-Nxxxx-xxE TS4441-X36RPE TS2841-X36TPC/W MS-Cxx66-xxxxGOPC TS8266-X4RIVPG1 TS5366-X12PE MS-Cxx65-PE TS8266-FPC/P MS-C5366-X12LVPC MS-C2966-X12RLVPC TS5511-GVH TS4466-RFIVPG1 TS4466-X4RIWG1 MS-Cxx72-xxxG1 MS-Cxx75-xxPD TS8266-RFIVPG1 MS-Cxx66-xxxPE PM3322-E MS-C5321-FPE TS2961-X12TPC MS-C8477-HPG1 TS4441-X36RE MS-C2972-RFLPC MS-Nxxxx-xxH MS-C2964-RFLPC MS-Cxx72-RFIPKG1 TS5366-X12RIPG1 TS5366-X12VPE TS2866-X4TGPC TS5510-GH MS-C2966-X12RLPC MS-Cxx72-xxxPE TS2966-X12TVPE MS-Cxx62-xxxPE MS-C5361-X12LPC MS-Cxx74-PA MS-Cxx52-xxxPE MS-Cxx83-xPD MS-Cxx71-xxxPE TS4466-X4RVPE MS-Cxx72-FIPKG1 TS8266-X4PE SP111 MS-Cxx63-PD TS8266-X4RIPG1 MS-Cxx61-xxxPE MS-Cxx66-RFIPKG1 MS-Cxx64-xPD MS-Cxx66-FIPKG1 TS4466-X4RWE PMC8266-FPE MS-C8477-PC MS-Cxx41-xxxPE TS4466-X4RIVPG1 MS-Nxxxx-xxT

CWE ID-CWE-639

Authorization Bypass Through User-Controlled Key

MS-C5361-X12LPC

Source -

CNA CVEs -

ADP CVEs -

CISA CVEs -

NVD CVEs -