CVE-2026-32644CWE-321

Milesight Cameras Use of Hard-coded Cryptographic Key

Critical · published April 27, 2026

CVSS v4.0
9.2
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00387 · 31.5th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-04-27T23:40Z
EPSS history
Timeline
  • 27 APR 23:40Z
    Milesight Cameras Use of Hard-coded Cryptographic Key
    cvelistv5