Milesight vulnerabilities

CVEs per yearBy the year they were published

1. 20195
2. 20221
3. 20246
4. 202475
5. 20251
6. 20266

Newest CVEs

• CVE-2026-29988

  A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions…

  Milesight · AM102/102L V2

  High8.3
• CVE-2026-20766

  Milesight Cameras Heap-based Buffer Overflow

  Milesight · MS-Cxx63-PD

  High8.6
• CVE-2026-32649

  Milesight Cameras OS Command Injection

  Milesight · MS-Cxx63-PD

  High7.3
• CVE-2026-32644

  Milesight Cameras Use of Hard-coded Cryptographic Key

  Milesight · MS-Cxx63-PD

  Critical9.2
• CVE-2026-27785

  Milesight Cameras Use of Hard-coded Credentials

  Milesight · MS-Cxx63-PD

  High7.7
• CVE-2026-28747

  Milesight Cameras Authorization Bypass Through User-Controlled Key

  Milesight · MS-Cxx63-PD

  High7.3
• CVE-2025-4043

  Milesight UG65-868M-EA Improper Access Control for Volatile Memory Containing Boot Code

  Milesight · UG65-868M-EA

  Medium6.1
• CVE-2024-36392

  MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  MileSight · DeviceHub

  Medium6.1
• CVE-2024-36391

  MileSight DeviceHub - CWE-320: Key Management Errors

  MileSight · DeviceHub

  Critical9.1
• CVE-2024-36390

  MileSight DeviceHub - CWE-20 Improper Input Validation

  MileSight · DeviceHub

  High7.5