CVE-2026-32649

MediumCVSS 6.8/10Last modified Jul 25, 2026

Description

A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
MilesightMS-Cxx63-PD<= 51.7.0.77-r12
MilesightMS-Cxx64-xPD<= 51.7.0.77-r12
MilesightMS-Cxx73-xPD<= 51.7.0.77-r12
MilesightMS-Cxx75-xxPD<= 51.7.0.77-r12
MilesightMS-Cxx83-xPD<= 51.7.0.77-r12
MilesightMS-Cxx74-PA<= 3x.8.0.3-r11
MilesightMS-C8477-HPG1<= 63.8.0.4-r3
MilesightMS-C8477-PC<= 48.8.0.4-r3
MilesightMS-C5321-FPE<= 62.8.0.4-r5
MilesightMS-Cxx72-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx62-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx52-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx66-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx66-xxxGPE<= 61.8.0.5-r2
MilesightMS-Cxx61-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx67-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx71-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx41-xxxPE<= 61.8.0.5-r2
MilesightMS-Cxx76-PE<= 61.8.0.5-r2
MilesightMS-Cxx65-PE<= 61.8.0.5-r2
MilesightMS-Cxx66-xxxG1<= 63.8.0.5-r3
MilesightMS-Cxx62-xxxG1<= 63.8.0.5-r3
MilesightMS-Cxx72-xxxG1<= 63.8.0.5-r3
MilesightMS-CQxx31-xxxG1<= CQ_63.8.0.5-r1
MilesightMS-CQxx68-xxxG1<= CQ_63.8.0.5-r1
MilesightMS-CQxx72-xxxG1<= CQ_63.8.0.5-r1
MilesightMS-Nxxxx-NxE<= 7x.9.0.19-r5
MilesightMS-Nxxxx-xxC<= 7x.9.0.19-r5
MilesightMS-Nxxxx-xxE<= 7x.9.0.19-r5
MilesightMS-Nxxxx-xxG<= 7x.9.0.19-r5
MilesightMS-Nxxxx-xxH<= 7x.9.0.19-r5
MilesightMS-Nxxxx-xxT<= 7x.9.0.19-r5
MilesightPMC8266-FPE<= PO_61.8.0.4_LPR
MilesightPMC8266-FGPE<= PO_61.8.0.4_LPR
MilesightPM3322-E<= PI_61.8.0.3_LPR-r3
MilesightTS4466-X4RIPG1<= T_63.8.0.4_LPR-r3
MilesightTS5366-X12RIPG1<= T_63.8.0.4_LPR-r3
MilesightTS8266-X4RIPG1<= T_63.8.0.4_LPR-r3
MilesightTS4466-X4RIVPG1<= T_63.8.0.4_LPR-r3
MilesightTS4466-RFIVPG1<= T_63.8.0.4_LPR-r3
MilesightTS8266-X4RIVPG1<= T_63.8.0.4_LPR-r3
MilesightTS8266-RFIVPG1<= T_63.8.0.4_LPR-r3
MilesightTS4466-X4RIWG1<= T_63.8.0.4_LPR-r3
MilesightTS8266-X4RIWG1<= T_63.8.0.4_LPR-r3
MilesightTS5510-GVH<= T_47.8.0.4_LPR-r7
MilesightTS5510-GH<= T_47.8.0.4_LPR-r6
MilesightTS5511-GVH<= T_47.8.0.4_LPR-r6
MilesightTS2966-X12TPE<= T_61.8.0.4_LPR-r3
MilesightTS4466-X4RPE<= T_61.8.0.4_LPR-r3
MilesightTS5366-X12PE<= T_61.8.0.4_LPR-r3

References

Timeline

Published
Apr 28, 2026
Last modified
Jul 25, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-32658.8A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. This affects an unknown part of the filCVE-2026-326507.5Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials tCVE-2026-326527.8Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console aCVE-2026-326557.8Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability. A low privileged attackCVE-2026-326577.3Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax VersionCVE-2026-326588.8Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. A low privileged attacker with remote acCVE-2026-32669.8Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to gCVE-2026-326619.3Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote CVE-2026-326625.3Development and test API endpoints are present that mirror production functionality.CVE-2026-326636.5The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the saCVE-2026-326657.5In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streamsCVE-2026-326667.5WebCTRL systems that communicate over BACnet inherit the protocol's lack of network layer authentication. WebCTRL does not implement additi